HTTP Strict Transport Security (HSTS) for Power BI Report Server

[WDarwish]

Hi All,

Wanted to know if HSTS configuration is possible on Power BI Report Server. It is certainly configurable on IIS hosted apps, but I couldn't determine if Power BI Report Server supports it, or if IIS can be used to host the Power BI Report Server web portal and service applications.

If anyone has concrete information on compatibility / configuration steps to enable HSTS on Power BI Report Server, sharing them would be hugely beneficial.

Thanks!

[d_gosbell]

The answer in this previous post appears to work Solved: Add HTTP Strict transport security header - Microsoft Fabric Community

[cyy247]

I installed IIS for HSTS to prevent a POA&M.

[shobhanan]

Any solution for this yet?

[ChandraBhushan]

Please update if solution to this is found. 

[cyang4]

We don't use IIS for our Power BI Report Server and I can't find a http.sys parameter for HSTS. Is it necessary to use IIS for on-premise Power BI Report Server if HSTS is required? Thank you very much!