Follow

How to configure a SECURE Flag for Cookies?

Prerequisites:

  1. CAWEB and WEB Portals are configured to SSL cert
  2. CAWEB and WEB Portals settings are configured to HTTPS instead of HTTP

Ensure the above 2 prerequisites are properly implemented before proceeding below steps. If not the secure flag may not work properly.

Steps to configure:

  1. Login to EasiShare Server (where WEB or CAWEB portals are hosted)
  2. Navigate to folder path where the Source files are hosted. Assume "D:\Apps\web or D:\Apps\caweb"
  3. Backup existing folders before proceed any changes
  4. Navigate to 'caweb" > Select Web.Config > Open the Config file
  5. Ensure below highlighted sections a & b requireSSL set as true under <system.web> section
    a)
     <authentication mode="Forms">
          <forms loginUrl="Home/Login" protection="All" defaultUrl="Home" name=".ASPXFORMSAUTH" requireSSL="true" timeout="20">
          </forms>
    </authentication>
    b)
    <httpCookies requireSSL="true" httpOnlyCookies="true"/>

  6. Save Config file

  7. Navigate to 'web" > Select Web.Config > Open the Config file
  8. Repeat step 5 and 6 for WEB portal

Steps to verify:

  1. Launch Google Chrome and go to either WEB or CAWEB portal website
  2. Press F12 (from Keyboard) to launch Developer Tools
  3. Go to Application tab -> Cookies ( left Panel) and ensure the Secure column was ticked

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk