Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 10.0 Security Technology Implementation Guide
  6. Application STIG
  7. IIST-SI-000244: Use TLS to send session IDs

IIST-SI-000244: Use TLS to send session IDs

IIS 10.0 website session IDs must be sent to the client using TLS.
To check compliance with IIST-SI-000244, complete the following steps for each site hosted on the IIS 10.0 web server:
  1. Open the IIS 10.0 Manager.
  2. Click the site name.
  3. Under
    Management
    , double-click the
    Configuration Editor
     icon.
  4. From the
    Section:
     drop-down list, select
    system.webServer/asp
    .
  5. Expand the
    Session
     section.
  6. Verify if
    keepSessionIdSecure
     is set to
    True
    .
If
keepSessionIdSecure
 option is not set to
True
, your application is not compliant.
If your application is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the website name.
  3. Under
    Management
    , double-click the
    Configuration Editor
     icon.
  4. From the
    Section:
     drop-down list, select
    system.webServer/asp
    .
  5. Expand the
    Session
     section.
  6. Select 
    True
     for the
    keepSessionIdSecure
     setting.
  7. In the
    Actions
     pane, click
    Apply
    .