Service Manager

Consultant Engineer

David Haycox

<div>
It's Exchange 2013 running on Server 2012 R2. Is that new enough?
</div>


<div>
It seems to be possible on Windows 2012 R2 : (IIS 8.5)<br><br><a href="https://www.saotn.org/enable-http-strict-transport-security-hsts-on-iis/#:~:text=Protip%3A%20IIS%208.5%20is%20the%20IIS%20version%20used,and%20which%20greatly%20simplifies%20protection%20against%20cookie%20hijacking." rel="ugc">How to enable HTTP Strict-Transport-Security (HSTS) on IIS - Sysadmins of the North (saotn.org)</a>&nbsp;
</div>


<div>
Well the customer has now changed their mind about it anyway, so I didn't get to try it. Thanks for the answers though!
</div>


<div>
<div class="content wysiwyg-content fr-view">
We have been asked if we can enable HSTS (HTTP Strict Transport Security) on an on-premises Exchange 2013 server. I can't find much information on this.<br><br>Is it possible?<br>Is it advisable?<br>How do we do it?<br><br>Many thanks
</div>
</div>



We have been asked if we can enable HSTS (HTTP Strict Transport Security) on an on-premises Exchange 2013 server. I can't find much information on this.
Is it possible?
Is it advisable?
How do we do it?
Many thanks

Enabling HSTS on Exchange 2013 on-premises

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.