Web Servers

Web servers hosted on the University of Memphis network must adhere to established system security guidelines and be maintained using system administration best practices including keeping operating systems (OS) patched, and removing or disabling unncessary services, applications, and ports.   Web server logs must be maintained in a directory that is not web-accessible.


Web Site Security

Web pages that display or collect sensitive or confidential information must be hosted on a secure server supporting an encrypted web protocol (https) with a digital certificate issued by a trusted certificate authority.  The University of Memphis ITD Web Services group (webservices@memphis.edu) manages an account with a trusted root certfication authority and will work with clients from across campus who need to obtain an SSL certificate for official department or unit web servers in the memphis.edu domain.