Change Error Policy Setting

By default, AIM outputs all error messages to the user's browser regardless of their origin. Disclosing such information can potentially lead to a security breach. However,you can configure IIS to show detailed error messages only when the client is on the web server computer, and to show simple error messages only to the remote users. Applying this IIS configuration is recommended for all websites associated with the AIM Dashboard.

Alternatively, you can modify the error policy to prevent exposing sensitive information that can be used to breach system security.

The error policy setting is changed by modifying the following appsetting in the AIM web.config:

<add key="avevanet:errorPolicy" value="Always" />

The values for this option can be found with descriptions on the relevant MSDN page.

With the above error policy setting being present in the web.config as a pre-requisite, this functionality is available after you complete the Web Deploy import process. To apply this setting, it is recommended that you follow this procedure.