HTTP Strict Transport Security (HSTS) for Power BI Report Server

Question

Hi All,&nbsp;Wanted to know if HSTS configuration is possible on Power BI Report Server. It is certainly configurable on IIS hosted apps, but I couldn't determine if Power BI Report Server supports it, or if IIS can be used to host the Power BI Report Server web portal and service applications.&nbsp;If anyone has concrete information on compatibility / configuration steps to enable HSTS on Power BI Report Server, sharing them would be hugely beneficial.&nbsp;Thanks!

cyang4 · Answer

We don't use IIS for our Power BI Report Server and I can't find a http.sys parameter for HSTS. Is it necessary to use IIS for on-premise Power BI Report Server if HSTS is required? Thank you very much!

chandrabhushan · Answer

Please update if solution to this is found.&nbsp;

shobhanan · Answer

Any solution for this yet?

cyy247 · Answer

I installed IIS for HSTS to prevent a POA&amp;M.

d_gosbell · Answer

The answer in this previous post appears to work&nbsp;Solved: Add HTTP Strict transport security header - Microsoft Fabric Community

Forum Discussion

HTTP Strict Transport Security (HSTS) for Power BI Report Server

5 Replies

Related content

Add HTTP Strict transport security header

Role Level Security

Governance & Security

SECURITY

Page level security