Server requirements
Hardware requirements for a server running a single Sitecore installation
To run a single Sitecore installation, the minimum configuration requirements are:
- 4 core processor
- 16 GB of RAM
The recommended hardware requirements are for running the software on a single computer. For more information about running Sitecore on different kinds of hardware, consult your Sitecore partner or technical sales representative.
IIS requirements
You must use the version of IIS that your operating system supports. For more information about IIS and operating systems, see Microsoft’s documentation.
Sitecore Experience Platform does not officially support any other ASP.NET web servers such as IIS Express, or Mono Web Server.
Sitecore Experience Platform neither supports nor allows multiple IIS website definitions to point to the same Sitecore web root.
Operating system requirements
Sitecore Experience Platform is only compatible with the client and server operating systems that support .NET Framework 4.8.0.
Sitecore Experience Platform can be hosted on the following Microsoft operating systems:
- Windows Server 2025
- Windows Server 2022
- Windows 11 (64-bit)
If the Transport Layer Security (TLS) protocol version 1.2 is not activated by default, you must enable it on all of your Sitecore Experience Platform content management and Dedicated Dispatch servers (DDS).
You can check that it is enabled in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client.
For Windows 11 and Windows Server 2022, TLS protocol version 1.3 is enabled by default.
You must disable the TLS 1.3 on all of your Sitecore Experience Platform content management and Dedicated Dispatch servers(DDS) and enable TLS 1.2.
For more information about enabling TLS 1.2, see Microsoft’s documentation.
Run Windows Update and install all the appropriate service packs and security updates on all of your Sitecore Experience Platform server and client computers.
.NET requirements
Sitecore Experience Platform requires .NET Framework 4.8.0.
Sitecore Identity server requires the latest .NET 10.0 Windows Hosting Bundle.
You must apply any available updates to the .NET Framework on every Sitecore installation.
Microsoft Visual C++ redistributable requirements
Sitecore Experience Platform 9.0 Update-1 introduced a new prerequisite for the Microsoft Visual C++ Redistributable. For more information, see Microsoft's documentation.
This redistributable might already be installed with Microsoft Windows. Without it, Sitecore Experience Platform will fail to start up with the message:
Could not load file or assembly 'ChilkatDotNet**.dll' or one of its dependencies. The specified module could not be found.
Database requirements
Sitecore Experience Platform supports the following database servers:
-
Microsoft SQL Server 2025
-
Microsoft Azure SQL
You must create the Azure SQL instance in advance and pass the address and the server administrator credentials in the corresponding parameters when you run the installation.
For more information, see the Sitecore XP documentation.
Enable Contained Database Authentication
When you use Web Deploy Packages, you must ensure that the target SQL Server is configured to allow users and logins to be contained at the database level.
To configure the target SQL Server:
-
Launch Microsoft SQL Server Management Studio and log in as an administrator.
-
Run the following new query:
For more information about the contained database authentication option, see Microsoft's documentation.
Configure encrypted communication with SQL Server
New versions related applications might require encrypted communication with SQL Server, for example Sitecore Identity Server module version 8.0 and later, and Sitecore Publishing Service version 8.0 and later. This change is due to the adoption of a newer version of Microsoft.Data.SqlClient that enforces increased security, as described in Microsoft’s Breaking changes in EF Core 7.0 article.
To configure encrypted communication with SQL Server:
-
Configure an encryption certificate on SQL Server. A valid encryption certificate must be installed and configured on SQL Server to support encrypted communication. For more information refer to Microsoft’s Configure SQL Server Database Engine for encrypting connections article.
-
Ensure the certificate is trusted on the server hosting the Sitecore application.
-
(Optional) Enforce the Sitecore application to use an encrypted connection to SQL Server. Update the connection string of the Sitecore databases to add the following parameters:
For example:
This configuration ensures encrypted communication with SQL Server while enforcing strict certificate validation.
Alternate configuration: SQL Server-generated self-signed certificates
To simplify the installation process for a non-production deployment, you can skip configuring an encryption certificate for SQL Server. If the certificate is not explicitly configured, SQL Server automatically generates a self-signed certificate (fallback certificate) at startup and uses it for encryption. This approach is not recommended for production environments.
To accommodate this configuration in a Sitecore application, select one of the following approaches:
-
Disable encryption: Update the connection strings of the Sitecore databases to include:
-
Enable encryption but disable the client's validation of certificate (trust the server's certificate). Update the connection strings of the Sitecore databases to include:
For Identity Server 8 and above, you can specify values for the
EncryptandTrustServerCertificateparameters at the moment of the installation using theEncryptSecurityDbConnectionandTrustServerCertificateSecurityDbConnectionparameters defined in theIdentityServer.jsonfile.
Search indexing requirements
Sitecore Experience Platform 10.5.X supports Solr 10.0.0. Solr is the default search provider and supports both content search and analytics search. To use the Sitecore Installation Framework (SIF), you must have Solr installed with basic authentication enabled.
Support for Lucene was removed in Sitecore XP 9.3.0.
Support for Azure Search was removed in Sitecore XP 10.2.0.
For more information about how to install and manage these index providers in Sitecore Experience Platform, see Sitecore documentation.
Installing Solr
Starting from Sitecore 10.5.x, all Solr connections must use basic authentication.
If you plan to use the Sitecore Installation Assistant to install Sitecore XP, it can install Solr for you and configure the required basic authentication automatically. You can skip this section.
If you plan to use the Sitecore Installation Framework (SIF) to install Sitecore XP, you must follow the steps described in this section.
The standard Sitecore Experience Platform configuration requires Solr. The Sitecore Experience Platform is secure by default. You must enable SSL for Solr.
Before you run the SIF, you must:
- Install Solr and configure it to run as a Windows service.
- Set up basic authentication for Solr.
- Ensure that a Solr adminstrator user is available with at least the following permissions:
core-admin-readcore-admin-editcollection-admin-read(only if running SolrCloud)collection-admin-edit(only if running Sol Cloud)security-editsecurity-readhealth
- Enable and set up SSL for Solr.
The Solr-Singledeveloper.json deployment configuration file installs and configures Solr with SSL, basic authentication, and the required administrator permissions.
For local testing and development, you can set up a self-signed certificate. The Apache Solr Reference guide has more information about creating a self-signed certificate.
For more information about installing Solr, see the section Install a search provider in a scaled solution.
Antivirus software considerations
Some antivirus software can have a detrimental effect on the performance of ASP.NET applications, including Sitecore. We recommend that you use only antivirus scanners that are certified for your operating system.
For more information about the certified products, see the Windows Server Catalog website.
For optimal performance, ensure that the following folders are not scanned by your antivirus software:
- The site root folder.
- The data folder defined in the
web.configfile. - The folder that contains the actual Sitecore database files.
- The
C:\Windows\Temp or {app_pool user profile}\Tempfolder.
Active file scans from antivirus tools can significantly impact the performance of search indexing software. This can lead to poor user experience or slow system performance. Consider turning off any antivirus tools or modifying antivirus settings on the search index server to exclude the application data folders from scans. For more information about your search indexing software, consult the related documentation.
Prerequisites for using the Sitecore Installation Framework
To use the Sitecore Installation Framework to install Sitecore Experience Platform in an on-premises environment, you must download and install: