15.2 Enforce Secure HTTPS Browser Connections with Apache

HTTP Strict Transport Security (HSTS) is a web security policy mechanism that helps protect web application users against passive and active network attacks.

To enable HSTS for iPrint Appliance, you must enable HSTS in the Apache web server so that an HTTP header (Strict-Transport-Security) is added when an HTTPS session has already been established.

  1. Edit file /etc/httpd/conf.d/ssl.conf, locate the line <VirtualHost _default_:443> and add the following lines there:

    Header always set Strict-Transport-Security max-age=63072000

  2. Restart Apache.

    systemctl restart apache2

For more information, see Apache Documentation.