{"meta":{"title":"Hardening security for your enterprise","intro":"You can configure features and settings to harden security for your enterprise.","product":"Enterprise administrators","breadcrumbs":[{"href":"/en/enterprise-server@3.17/admin","title":"Enterprise administrators"},{"href":"/en/enterprise-server@3.17/admin/configuring-settings","title":"Configuration"},{"href":"/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise","title":"Harden security"}],"documentType":"subcategory"},"body":"# Hardening security for your enterprise\n\nYou can configure features and settings to harden security for your enterprise.\n\n## Links\n\n* [Configuring TLS](/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-tls)\n\n  You can configure Transport Layer Security (TLS) on GitHub.com so that you can use a certificate that is signed by a trusted certificate authority.\n\n* [/configuring-tls-and-ssh-ciphers](/en/enterprise-server@3.17/configuring-tls-and-ssh-ciphers)\n\n* [Troubleshooting TLS errors](/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise/troubleshooting-tls-errors)\n\n  If you run into TLS issues with your appliance, you can take actions to resolve them.\n\n* [Enabling private mode](/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise/enabling-private-mode)\n\n  In private mode, GitHub Enterprise Server requires every user to sign in to access the installation.\n\n* [Enabling subdomain isolation](/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise/enabling-subdomain-isolation)\n\n  You can set up subdomain isolation to securely separate user-supplied content from other portions of your GitHub Enterprise Server appliance.\n\n* [Configuring host keys for your instance](/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-host-keys-for-your-instance)\n\n  You can increase the security of GitHub.com by configuring the algorithms that your instance uses to generate and advertise host keys for incoming SSH connections.\n\n* [Configuring SSH connections to your instance](/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-ssh-connections-to-your-instance)\n\n  You can increase the security of GitHub.com by configuring the SSH algorithms that clients can use to establish a connection.\n\n* [Configuring the referrer policy for your enterprise](/en/enterprise-server@3.17/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-the-referrer-policy-for-your-enterprise)\n\n  You can increase the privacy of GitHub.com by configuring the policy for cross-origin requests.\n\n* [/restricting-network-traffic-to-your-enterprise-with-an-ip-allow-list](/en/enterprise-server@3.17/restricting-network-traffic-to-your-enterprise-with-an-ip-allow-list)\n\n* [/restricting-access-to-githubcom-using-a-corporate-proxy](/en/enterprise-server@3.17/restricting-access-to-githubcom-using-a-corporate-proxy)"}