HTTP Strict Transport Security (HSTS) configurations are handled via the Internet Information Services (IIS) Manager. Complete the following steps in IIS Manager to enable HSTS:
From the Start menu, search and select the IIS Manager (InetMgr.exe)
Once IIS Manager is loaded, navigate to the Sites directory located in the Connections panel (left panel):
From the Sites directory, locate and select the Default Web Sites:
Under the Actions panel (right-side), Click HSTS under the Configure section:
Once the HSTS modal is loaded, make sure the Enable checkbox is checked:
Once Enable is checked, set Max-Age to the recommended value, 31536000, which is equivalent to the amount of seconds in a year.
Click OK to complete and activate the configuration:
