New article
Recently updated
Troubleshooting session cookie not being set to 'Secure'
If Windows authentication is used for the Internal Audit Web module you may find that the 'Secure' flag for the session cookie is not set.
In order to resolve this:
- Ensure nobody is using the Web module
- Edit the file WebUI\Web.config
- Locate the line:
<httpCookies httpOnlyCookies="true"/>
- Change this line to read:
<httpCookies httpOnlyCookies="true"requireSSL="true"/>
- Save the file
As the existing session cookie remains valid until expiry, it will be necessary to log out of the Internal Audit WebUI before the change becomes visible.