Enforce HTTPS for the Content Publishing role
Version:
See: How To Set Up an HTTPS Service in IIS. No additional configuration is required.
If you have suggestions for improving this article, let us know!
Platform Administration and Architecture
- Securing Experience Manager
- Securing Experience Platform
- Database security recommendations
- Configure SQL Always Encrypted for the xDB Collection database
- Walkthrough: Configuring Always Encrypted for the Sitecore Cortex Processing databases using Azure Key Vault
- Walkthrough: Configuring Always Encrypted for the Sitecore Cortex Processing databases using Windows Key Store
- Walkthrough: Setting up Always Encrypted for the suppression list in EXM
- Allow or deny users access to web resources
- Change the administrator password
- Change the hash algorithm for password encryption
- Configure API authentication keys in a scaled environment
- Configuring your firewall
- Enable and disable an administrative tool
- Disable client RSS feeds
- Disable SQL Server access from XSLT
- Enable or disable client certificate authentication for XP service roles
- Replace a Sitecore client certificate in Azure
- Enable FIPS
- Increase login security
- IP hashing
- Limit access to XML, XSLT, and MRT files
- Limit access to PhantomJS
- Protect media requests
- Remove header information from responses sent by your website
- Restrict access to the client
- Secure Sitecore.Services.Client
- Secure the file upload functionality
- Secure the Telerik controls
- Separate Content Management and Content Delivery servers
- Enforce a strong password policy
- Protect the connection string passwords from unauthorized access
- Updates and disaster recovery
- Application and database permissions
Documentation Assistant
This assistant uses AI to generate responses based on Sitecore documentation. While it has access to official sources, answers may be incomplete or inaccurate and should not be considered official advice or support.
Powered by
Protected by reCAPTCHA