Securing Acumatica for Private Cloud and On-Premise Hosting

Securing your website with SSL 2048 encryption is your first defense against internet access, you can add another layer of security with password encryption rules, Single Sign on (SSO) and other security measure, Acumatica Cloud ERP makes it easier to configure those rules on SaaS platform.

If your hosting Private cloud or On-Premise then you will run into configuring SSL redirection on IIS for specific domain or sub-domain.
All web request made in non-secure mode needs to be redirected to secure (https) mode.

Few quick steps for securing Acumatica hosted environment.

Step 1: Get a 2048 bit SSL certificate (You might think Verisign but I would go with InstantSSL they are just $99 and still does the same thing, it secures your website)

Step 2: Install the certs on IIS 6/7, make sure to enable URL Rewrite module in IIS.

Step 3: Configure the URL Rewrite by creating new rule to redirect all HTTP (non-secure) request to HTTPS (secure) request URL with regular expression

Requested URL: Matches the Pattern
Using: Regular Expressions
Pattern: (.*)

The pattern might vary depending on domain or sub-domain your configuring, use the test pattern button to see the results, quite helpful in troubleshooting the parameters.



Step 4: Save the configuration, which updates your web.config file (below is just an example) with URL rewrite rule and conditions

There you have it folks, this will secure Acumatica Cloud ERP website and all your transactions are secured no matter how they access the website, on any device, on any browser the website is always redirected to secure (https) mode.

Stay secured !!!