TMA-SHAREPOINT-1.2
Ensure that the SharePoint Central Administration Site is TLS- enabled
설명
Transport Layer Security (TLS) provides protection when communicating over the internet. Traffic is encrypted for portions of information transportation. Ensure that the Central Administration site is configured to be used with TLS. Manual review.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
In IIS Manager select 'SharePoint Central Administration v4' > Bindings. Verify an HTTPS binding exists with Port, Host name and a valid SSL certificate set (and no plain HTTP binding is used). Get-SPWebApplication -IncludeCentralAdministration shows the CA URL.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Acquire a certificate, then Set-SPCentralAdministration -Port <port> -SecureSocketsLayer; if the certificate is for an FQDN: Set-SPAlternateUrl -Identity https://servername:443 -Url https://fqdn:443 -Zone Default; bind the certificate in IIS.
속성
- 운영 체제
- 모두
- 태그
- sharepointtlscentral-admin
- 참고 자료
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.2 Ensure that the SharePoint Central Administration Site is TLS- enabled