This is an old revision of the document!
Table of Contents
Application Security
The following security measures must be implemented in order to secure Versago's operation.
HTTPS
HTTPS with SSL is mandatory for Versago.
The Versago website requires the use of the SSL option. In order to use this option effectively you will need to acquire an SSL Certificate. This is a tool that helps ensure secure communication between the web browser and the website.
URL Rewrite
Download and install the URL Rewrite extension to IIS which is required by Versago to operate correctly.
The extension can be downloaded from Microsoft's IIS site
TLS Versions
We recommend that protocols TLS 1.0 and 1.1 be disabled
A server reboot is required after disabling these protocols. The protocols can remain active if other applications running on the Versago server require them
Disabling TLS 1.0 and 1.1 may create compatibility issues with Crystal reports whose DB connection is not set using the SQL Native Client 11.0. In order to resolve the issue, redefine the DB connections in Crystal reports using the SQL Native Client 11.0 This article provides more details on how to redefine the Crystal report data source
The easiest way to toggle SSL protocols is by using a utility called IISCrypto.
- Download the IIS Crypto GUI program
- Run the IIS Crypto program
- Click on Best Practices
- Deselect TLS 1.0 and 1.1 for both Server and Client protocols
- Click Apply
- Reboot server
Follow these step to manually disable the protocols:
- Open the registry editor
- Navigate to \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client
- Set the DisabledByDefault entry DWORD value to 1
- Set the Enabled entry DWORD value to 0
- Navigate to \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
- Set the DisabledByDefault entry DWORD value to 1
- Set the Enabled entry DWORD value to 0
- Repeat for TLS 1.1
- Reboot server
Require Server Name Indication
Define a host name and set 'Require Server name Indication' in the bindings settings for the Versago site.
- Open IIS Manager
- Select the Versago Site on the left pane
- Go to the Actions pane to the right and select and edit Bindings
- set Hostname to your site's name and select Require Server Name Indication as shown below
