Technical instruction - Enforce HTTPS in IIS

Open IIS Manager:

• Launch IIS Manager and select the site for which you want to enforce HTTPS.

Require SSL:

• Double-click SSL Settings in the Features View.

• Check Require SSL.

• Click Apply in the right-hand action pane.

Redirect HTTP to HTTPS:

• Install and use the URL Rewrite module if it's not already installed.

• Navigate to the site in IIS Manager.

• Double-click URL Rewrite in the Features View.

• Click Add Rules in the right-hand pane.

• Select Blank Rule and name it (e.g., "Redirect to HTTPS").

• Under Conditions, click Add:

  • Condition Input: {HTTPS}

  • Check if input string: Matches the pattern.

  • Pattern: ^OFF$

  • Click OK.

• Under Action, configure as follows:

  • Action Type: Redirect.

  • Redirect URL: https://{HTTP_HOST}/{R:1}

  • Redirect Type: Permanent (301).

• Click Apply in the right-hand pane.

• Test the rule by accessing the site via HTTP.