Hardening security for your enterprise

You can configure Transport Layer Security (TLS) on your GitHub Enterprise Server instance so that you can use a certificate that is signed by a trusted certificate authority.

If you run into TLS issues with your appliance, you can take actions to resolve them.

In private mode, GitHub Enterprise Server requires every user to sign in to access the installation.

You can set up subdomain isolation to securely separate user-supplied content from other portions of your GitHub Enterprise Server appliance.

You can increase the security of your GitHub Enterprise Server instance by configuring the algorithms that your instance uses to generate and advertise host keys for incoming SSH connections.

You can increase the security of your GitHub Enterprise Server instance by configuring the SSH algorithms that clients can use to establish a connection.

You can increase the privacy of your GitHub Enterprise Server instance by configuring the policy for cross-origin requests.