Http Strict Transport Security Enforcement

You can enforce a Http Strict Transport Security to Enterprise Console sites in AVEVA Work Tasks for secured access. When the security is enforced, only the secured sites will be loaded.

To enforce Http Strict Transport Security, add the code in the Enterprise Console web.config file available in <Installed path>\Web\BPMUITemplates\Default> as given below:

<system.webServer>

    <httpProtocol>

        <customHeaders>

           <add name="Strict-Transport-Security" value="max-age=31536000"/>

        </customHeaders>

    </httpProtocol>

</system.webServer>