---
title: "Forcing SSL Connections on Windows Servers"
source: "https://docs.nexcess.com/hosting/server-administration/windows/forcing-ssl-connections-on-windows-servers/"
description: "To ensure every website visitor uses a secure (SSL) connection, adjust IIS to redirect http://mysite.com to https://mysite.com. This article explains how."
vertical: "Hosting"
date: "2024-03-04"
last_modified: "2026-07-27"
---

# Forcing SSL Connections on Windows Servers

If you want to make sure every website visitor is using a secure (SSL) connection, you can adjust IIS to redirect this traffic. This will redirect *http://mysite.com* to *https://mysite.com*. Of course, this will only work if you have an up-to-date SSL installed for your domain. If you need to install an SSL for your domain, see [Installing an SSL Certificate in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/installing-an-ssl-certificate-in-plesk/) or [Installing an SSL Certificate on a Windows Core Managed Server](https://docs.nexcess.com/hosting/server-administration/windows/installing-an-ssl-certificate-on-a-windows-core-managed-server/).

## Plesk Fully-Managed Server

In Plesk Onyx (versions 17.0 and up), you can force https connections by checking the box in the Hosting Settings section of a domain.

1. Open the Domain in Plesk.
2. Click on Hosting Settings.

![hosting settings link](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_w0q8h2.png)

3. In the section labeled **Security**, check the box next to **Permanent SEO-safe redirect from HTTP to HTTPS**. Then scroll to the bottom of the page and click **OK**.

![https redirect setting](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_uYSVlT.png)

## Core-Managed and Self-Managed Servers (or servers with Plesk version 12.5 or older)

To force https on servers in IIS, you can use the URL Rewrite module in IIS or add a few lines of code to the web.config file for the site.

### To use the IIS URL Rewrite module

1. Open IIS, select the domain you want to modify, and double-click URL Rewrite.

![URL Rewrite module](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_vE1URp.png)

2. Click **Add Rule** in the upper right corner, then Select **Blank rule** (under Inbound rules) and click **OK**.

![add rule screen](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_lHl9Mp.png)

3. Set the following options to match those pictured below

- Requested URL – Matches the Pattern
- Using – Regular Expressions
- Pattern – (.\*)
- Conditions, Logical group – Match All
- Conditions, Input – {HTTPS}, Matches the Pattern, Off
- Action Type – Redirect
- Redirect URL – https://{HTTP\_HOST}{REQUEST\_URI}
- Redirect type – Permanent (301)

![url rewrite rule part 1](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_TY192f.png)  
![url rewrite rule part 2](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_ODyIo9.png)  
![url rewrite rule part 3](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_13dDWg.png)

4. Click **Apply**. (If the rule causes problems with the site, you can select the rule name and click **Disable Rule** on the right side of the screen to stop it).

### To Redirect Using the Web.config File

Another method of forcing https is to add a few lines of code to the web.config file. These directions assume you are comfortable editing your site’s web.config file. For more information on web.config files, see [Understanding the web.config file](https://docs.nexcess.com/hosting/server-administration/windows/internet-information-services-iis-your-windows-web-server-guide/understanding-the-web-config-file/).

1. Make a backup copy of your web.config file.
2. Open the web.config file and add the following code snippet to the configuration/system.webServer section. Save the file when you are finished adding the code.

```
<rewrite>
       <rules>
            <clear />
                <rule name="Redirect to https" stopProcessing="true">
                    <match url="(.*)" />
                    <conditions>
                        <add input="{HTTPS}" pattern="off" ignoreCase="true" />
                    </conditions>
                    <action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" redirectType="Permanent" appendQueryString="false" />
                </rule>
       </rules>
</rewrite>
```

| ### NOTE: |
|---|
| If you are using a Content Management System (like WordPress or Joomla) or other custom web applications, any of these methods may cause your site to work incorrectly. You may need to consult a web developer for more complex issues. |