Control access to the CMS Console on your website.

You can control access to the CMS Console by:

• forcing access via HTTPS
• disabling access altogether

These configuration options are stored in ~/App_Data/Composite/Configuration/C1ConsoleAccess.xml.

By default, the configuration is this:

<C1ConsoleAccess enabled="true">
  <ClientProtocol forceHttps="false" allowFallbackToHttp="true" customHttpsPortNumber="" />
</C1ConsoleAccess>

Forcing access to the CMS Console via HTTPS

By default, the HTTPS access to the CMS Console is disabled. To enable it:

1. Edit ~/App_Data/Composite/Configuration/C1ConsoleAccess.xml.
2. Set the forceHttps parameter to "true". (Consider disabling falling back to HTTP, too - see below).
3. Restart the server ("Tools" | "Restart Server").

<C1ConsoleAccess enabled="true">
  <ClientProtocol forceHttps="true" allowFallbackToHttp="true" customHttpsPortNumber="" />
</C1ConsoleAccess>

If the HTTPS is configured on your website, the user will be redirected to https:// (secure) whenever he or she access the CMS Console.

Important. If the HTTPS is not configured on your website, the user will be able to fall back to http:// (insecure) with the setup above when accessing the CMS Console.

To disable access via HTTP and force HTTPS only:

1. Edit ~/App_Data/Composite/Configuration/C1ConsoleAccess.xml.
2. Set the allowFallbackToHttp parameter to "false" (enabled by default).
3. Restart the server ("Tools" | "Restart Server").

<C1ConsoleAccess enabled="true">
  <ClientProtocol forceHttps="true" allowFallbackToHttp="false" customHttpsPortNumber="" />
</C1ConsoleAccess>

Using a custom HTTPS port number

If your website uses a HTTPS port number other than default 443:

1. Edit ~/App_Data/Composite/Configuration/C1ConsoleAccess.xml.
2. Set the customHttpsPortNumber parameter to the number in use. (No value stands for the default "443".)
3. Restart the server ("Tools" | "Restart Server").

<C1ConsoleAccess enabled="true">
  <ClientProtocol forceHttps="true" allowFallbackToHttp="false" customHttpsPortNumber="1234" />
</C1ConsoleAccess>

Completely disabling access to the CMS Console

1. Edit ~/App_Data/Composite/Configuration/C1ConsoleAccess.xml.
2. In the C1ConsoleAccess element set the enabled parameter to "false" ("true" by default).
3. Restart the server ("Tools" | "Restart Server").

<C1ConsoleAccess enabled="false">
  <ClientProtocol forceHttps="false" allowFallbackToHttp="true" customHttpsPortNumber="" />
</C1ConsoleAccess>

<C1ConsoleAccess enabled="true">
  <ClientProtocol forceHttps="true" allowFallbackToHttp="false" customHttpsPortNumber="1234" />
</C1ConsoleAccess>