Skip to main content
S
scotch123
Participant
August 17, 2009
Question

Force SSL on CF Administator Login

  • August 17, 2009
  • 1 reply
  • 2009 views

Hello,

We have a section of our site which is secure with SSL and I was wondering how I can force http://www.mysite.com/cfide/administrator/ to https://www.mysite.com/cfide/administrator/. It doesn't look like you can edit the CF Templates for any kind of cflocation or other re-direct.

I am running CFMX. Yes, ancient I know.

Thanks a lot.

    This topic has been closed for replies.

    1 reply

    F
    Fireye-
    Participating Frequently
    August 18, 2009

    What webserver are you using?  I'm pretty sure you could use mod_rewrite on apache to force all pages in /administrator to load via https.  Not sure if it's as easy with IIS

    S
    scotch123Author
    Participant
    August 18, 2009

    We're running Windows 2000 Microsoft-IIS/5. Yes, it's ancient. We're hopefully going to LAMP soon.

    F
    Fireye-
    Participating Frequently
    August 18, 2009

    I _believe_ this solution will work for you, try this:

    1) Open up Internet Information Services Administrator (IIS Admin)

    2) Navigate to the website where your CFIDE directory is

    3) Rightclick on the Administrator directory, and go to Properties

    4) Go to the Directory Security tab, and then click "Edit" under Secure Communications

    5) Check "Require secure channel (SSL)", and I'd probably check "Require 128-bit encryption" as well.

    That should force all pages in cfide\administrator to get a redirect to https.  Let me know how it works for you!

    Edit:

    That will require SSL for that directory, but it won't auto-forward you to a HTTPS url.  If you want that, try the directions here:

    http://www.entrust.net/knowledge-base/technote.cfm?tn=5707 (Starting from Automatically Redirect Users to the SSL Site)

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices