Centralized Certificate Store (CCS) and IIS bindings
After IIS8, CCS (Centralized Certificate Store) feature can be used to pick up website certificates from a network share. It makes certificate management a lot easier from a single store instead of managing them in every server’s local certificate stores.
IIS Hardening issues
Hello, we need to fix these IIS hardening issues. Is it allowed to set these without break sharepoint functionality? and how should i set/fix these? 1. Ensure 'host headers' are on all sites You need to define a host on your binding: *:32843: *:32844: 32845:* * on site SharePoint Web Services. You need to define a host on your binding: :2016: on site SharePoint Central Administration v4. 2. Ensure Unlisted File Extensions are not allowed SharePoint Central Administration v4:In web config filter: 'system.webServer/security/requestFiltering/fileExtensions' the property: 'allowUnlisted' is set to 'True' but expected is: 'False'. 3. Ensure HSTS Header is set Server Default Setting:OK In web config filter: '/system.webServer/httpProtocol/customHeaders' of site 'Server Default Setting' a customHeader 'Strict-Transport-Security' should be defined. Thanks a lot Kind regards
