Secure Sockets Layer (SSL) settings
|
1.
|
Select the pages on your website that require Secure Sockets Layer (SSL). |
|
•
|
To require SSL for all pages, select Require for all pages. The program uses “https” when you build URLs for all pages on your website. |
|
|
If your organization uses an offload server to handle SSL transactions, select Require for all pages. The program supports an SSL offloader only when the entire website is secure. |
Note: When Blackbaud hosts your website, the Require for secure content and Require for administration pages checkboxes are disabled to help you comply with the Payment Card Industry Data Security Standard (PCI DSS). To select or clear these checkboxes, create a case on Case Central.
|
•
|
To require SSL for site pages that could contain sensitive data such as credit card information, select Require for secure content. |
|
|
The program uses “https” when you build URLs for web pages that contain a part that has secure content. These parts include the User Login, eCards, Donation Form, Membership Form,Q Event Registration Form, Fundraiser, Personal Page Manager, Form Display, Formatted Text and Images (Secured), and Transaction Manager parts. |
|
•
|
To require SSL for administration pages, select Require for administration pages. The program enables SSL across the entire administrative site and uses “https” in the URLs for all administration pages on your website. |
Warning: To improve security, we strongly recommend that you select Require for administration pages. This prevents your browser from storing administration pages in a shared cache. If you do not select this option, an unauthorized user who logs in after an administrator logs out may be able to access pages that contain sensitive information.
Note: When you select any of the SSL options, the program also uses "https" in the URL for your site's administration login.aspx page to help you comply with the Payment Card Industry Data Security Standards (PCI DSS).
|
2.
|
To save the settings, click Save. |