Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 10.0 Security Technology Implementation Guide
  6. Server STIG
  7. IIST-SV-000152: Use TLS to send session IDs

IIST-SV-000152: Use TLS to send session IDs

IIS 10.0 web server session IDs must be sent to the client using TLS.
To check compliance with IIST-SV-000152, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. In the
    Management
     section, double-click the
    Configuration Editor
     icon.
  4. From the
    Section:
     drop-down list, select
    system.webServer/asp
    .
  5. Expand the
    session
     section.
  6. Verify that
    keepSessionIdSecure
     is set to
    True
    .
If
keepSessionIdSecure
 is not set to True, your server is not compliant.
If your server is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. In the
    Management
     section, double-click the
    Configuration Editor
     icon.
  4. From the
    Section:
     drop-down list, select
    system.webServer/asp
    .
  5. Expand the
    session
     section.
  6. Select
    True
     for
    keepSessionIdSecure
    .
  7. In the
    Actions
     pane, click
    Apply
    .