SSL configuration
Resolving the "Site is not secure" browser warning for ADSelfService Plus
Issue description When users access the ADSelfService Plus portal in a web browser, the site may be flagged as Not Secure or trigger a security warning. This can discourage end users from logging in, reduce trust in the application, and disrupt ...
How to migrate or reuse an SSL certificate in ADSelfService Plus
Objective This article explains how to locate and migrate an existing SSL certificate from one ADSelfService Plus instance to another. This is useful when migrating your application to a new server, allowing you to reuse your current certificate, ...
How to disable TLSv1 and TLSv1.1 in ADSelfService Plus
Objective This article explains how to disable older, insecure versions of the TLS protocol, TLSv1 and TLSv1.1, in ADSelfService Plus. Disabling deprecated protocols is crucial to: Strengthen HTTPS communication security. Prevent vulnerabilities such ...
How to apply a .PFX certificate in ADSelfService Plus
Objective This article explains how to import and apply a .pfx certificate in ADSelfService Plus to enable HTTPS access. A .pfx file securely bundles your SSL certificate and its corresponding private key, allowing you to replace the default ...
FAQ on CSRF-related cookies in ADSelfService Plus
This FAQ section covers common questions about the adscsrf and _zcsr_tmp cookies used in ADSelfService Plus. It aims to explain their role in cross-site request forgery (CSRF) protection and overall portal functionality, and clarifies any security ...