Hi David,

After you have installed and configured the SSL certificate, the only thing you need to do in Umbraco is set the umbracoUseSSL setting in the webconfig file to true.

After that you will have to add some redirects in order to redirect traffic from HTTP to the HTTPS version of your website:

<rule name="Http to https" stopProcessing="true">
       <match url="(.*)" />
       <conditions logicalGrouping="MatchAll" trackAllCaptures="false">
                <add input="{HTTPS}" pattern="^OFF$" />
       </conditions>
       <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Permanent" />
</rule>

One other thing you have to consider is setting up a strict transport security layer when using HTTPS, you can add this in the outbound rules of the web config:

<outboundRules>
    <rule name="Add Strict-Transport-Security when HTTPS" enabled="true">
        <match serverVariable="RESPONSE_Strict_Transport_Security" pattern=".*" />
            <conditions>
                <add input="{HTTPS}" pattern="on" ignoreCase="true" />
            </conditions>
            <action type="Rewrite" value="max-age=31536000" />
    </rule>
</outboundRules>

Also take a look at this blogpost of Sebastiaan Janssens about securing your Umbrco website: https://cultiv.nl/blog/so-you-want-to-secure-your-umbraco-site/

Hope this helps.

/Michaël

Hi Michaël

Thanks for the reply, wasnt as daunting as I thought it would be. All set up now :)

Appreciate the help.

is working on a reply...