Microsoft SharePoint Server
TMA-SHAREPOINT-1.2
Ensure that the SharePoint Central Administration Site is TLS- enabled
Descrição
Transport Layer Security (TLS) provides protection when communicating over the internet. Traffic is encrypted for portions of information transportation. Ensure that the Central Administration site is configured to be used with TLS. Manual review.
Como é verificado
Método de auditoria: Revisão manual
In IIS Manager select 'SharePoint Central Administration v4' > Bindings. Verify an HTTPS binding exists with Port, Host name and a valid SSL certificate set (and no plain HTTP binding is used). Get-SPWebApplication -IncludeCentralAdministration shows the CA URL.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Acquire a certificate, then Set-SPCentralAdministration -Port <port> -SecureSocketsLayer; if the certificate is for an FQDN: Set-SPAlternateUrl -Identity https://servername:443 -Url https://fqdn:443 -Zone Default; bind the certificate in IIS.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- sharepointtlscentral-admin
- Referência
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.2 Ensure that the SharePoint Central Administration Site is TLS- enabled