Microsoft SharePoint Server
TMA-SHAREPOINT-1.2
Ensure that the SharePoint Central Administration Site is TLS- enabled
Opis
Transport Layer Security (TLS) provides protection when communicating over the internet. Traffic is encrypted for portions of information transportation. Ensure that the Central Administration site is configured to be used with TLS. Manual review.
Kako se proverava
Metod provere: Ručni pregled
In IIS Manager select 'SharePoint Central Administration v4' > Bindings. Verify an HTTPS binding exists with Port, Host name and a valid SSL certificate set (and no plain HTTP binding is used). Get-SPWebApplication -IncludeCentralAdministration shows the CA URL.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Acquire a certificate, then Set-SPCentralAdministration -Port <port> -SecureSocketsLayer; if the certificate is for an FQDN: Set-SPAlternateUrl -Identity https://servername:443 -Url https://fqdn:443 -Zone Default; bind the certificate in IIS.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- sharepointtlscentral-admin
- Referenca
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.2 Ensure that the SharePoint Central Administration Site is TLS- enabled