IIS - Configuring HTTP Strict Transport Security

 Configure headers per website

Open the Internet Information Services (IIS) Manager via Start → Administrative Tools → IIS Manager. 

• Click on HTTP Response Headers.
• Click on Add... in the Actions panel.

• Enter the following values in the Add Custom HTTP Response Headers dialog box:<

                Name: Strict-Transport-Security

                Value: max-age=31536000

• Close the IIS Manager after confirmation.

Redirecting visitors to the HTTPS URL

Open the Internet Information Services (IIS) Manager via Start → Administrative Tools → IIS Manager.

Click on HTTP Redirect.

Check the Redirect box and enter the target URL (HTTPS). Set the status to permanent redirect (301)