Enable HSTS on Exchange Server 2019

Question

Hi

We have 3 Exchange server2019 with DAG configured on windows server 2019.

We need to enable to HSTS,

I have setting to configure on Default Web site --> HSTS and enter below entries:

Max-age 31536000

Enable incluseSubDomains

Enable Preload

Is this setting correct and Is there any impect on exchange server for users and DBs ?

Answer 1

Hi @Mohammed Nadeem ,

The setting is correct. Refer to: Configure HSTS on Exchange Server

Configure HSTS on Windows Server 2019 and higher:

1. Sign in to the Exchange Server and start Internet Information Services (IIS) Manager.

2. Click in the connections panel on Default Web Site.

3. Click in the actions panel on HSTS…

4. Check the checkboxes and fill in the Max-Age: 31536000. Click OK.

You could check it:

1. Start your favorite web browser and go to the Exchange Server OWA address.

2. Open the browser inspector tool > Network.

3. Click on the refresh button or press F5 to reload the page.

4. Select the document HTML URL and verify that it shows the header:

strict-transport-security: max-age=31536000; includeSubDomains; preload

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.