Enforce HTTPS for the Content Publishing role
Version:
See: How To Set Up an HTTPS Service in IIS. No additional configuration is required.
Platform Administration and Architecture
- Securing Experience Manager
- Securing Experience Platform
- Database security recommendations
- Configure SQL Always Encrypted for the xDB Collection database
- Walkthrough: Configuring Always Encrypted for the Sitecore Cortex Processing databases using Azure Key Vault
- Walkthrough: Configuring Always Encrypted for the Sitecore Cortex Processing databases using Windows Key Store
- Walkthrough: Setting up Always Encrypted for the suppression list in EXM
- Allow or deny users access to web resources
- Change the administrator password
- Change the hash algorithm for password encryption
- Configure API authentication keys in a scaled environment
- Configuring your firewall
- Enable and disable an administrative tool
- Disable client RSS feeds
- Disable SQL Server access from XSLT
- Enable or disable client certificate authentication for XP service roles
- Replace a Sitecore client certificate in Azure
- Enable FIPS
- Increase login security
- IP hashing
- Limit access to XML, XSLT, and MRT files
- Limit access to PhantomJS
- Protect media requests
- Remove header information from responses sent by your website
- Restrict access to the client
- Secure Sitecore.Services.Client
- Secure the file upload functionality
- Secure the Telerik controls
- Separate Content Management and Content Delivery servers
- Enforce a strong password policy
- Protect the connection string passwords from unauthorized access
- Updates and disaster recovery
- Application and database permissions