How to enable HTTP Strict Transport Security (HSTS) Header on Authentication Manager Prime Self-Service Portal
Originally Published: 2025-04-07
Article Number
Applies To
RSA Product Set: SecurID Access
RSA Product/Service Type: SecurID Access Prime
Issue
Authentication Manager Prime Self-Service Portal is missing the HTTP Strict Transport Security (HSTS) Header. This article walks through on enabling HSTS header for the AM Prime Self-Service Portal.
Tasks
Resolution
- HSTS is configurable in ssp.properties .
- Make a copy of ssp.properties located under <Primekit_Installation_Directory>/configs/ssp/config
set "enable.hsts.filter" parameter in the ssp.properties to true:
enable.hsts.filter=true- Make a copy of the headerConfig.xml under <Primekit_Installation_Directory>/configs/ssp/config
- Modify 'headerConfig.xml' as follows:
<?xml version="1.0" encoding="UTF-8"?>
<header>
<map key="Strict-Transport-Security" value="max-age=31536000; includeSubDomains"/>
<map key="Referrer-Policy" value="no-referrer"/>
</header>- Restart SSP service
Related Articles
Determining an existing RSA Prime version Number of Views HSTS (Strict-Transport-Security) Header Explanation for RSA Authentication Manager 8.x Number of Views "Authentication station status was 9" error when accessing RSA Authentication Manager Prime Self Service Portal (SSP) with… Number of Views RSA Prime: DigiCert Certificate Configuration Scripts Number of Views Configure password and security questions chained login for RSA Authentication Manager Prime Kit Self-Service Portal (SSP) Number of Views
Trending Articles
RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager 8.9 Setup and Configuration Guide RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide How to 'Trust' the RSA Authentication Manager Security Console Self-Signed Root CA certificate and prevent Cert warnings.
Don't see what you're looking for?
