{"meta":{"title":"强化企业的安全性","intro":"可以配置功能和设置来强化企业的安全性。","product":"企业管理员","breadcrumbs":[{"href":"/zh/enterprise-server@3.18/admin","title":"企业管理员"},{"href":"/zh/enterprise-server@3.18/admin/configuring-settings","title":"配置"},{"href":"/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise","title":"强化安全性"}],"documentType":"subcategory"},"body":"# 强化企业的安全性\n\n可以配置功能和设置来强化企业的安全性。\n\n## Links\n\n* [配置 TLS](/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-tls)\n\n  可以配置 GitHub.com 传输层安全性（TLS），以便可以使用由受信任的证书颁发机构签名的证书。\n\n* [/configuring-tls-and-ssh-ciphers](/zh/enterprise-server@3.18/configuring-tls-and-ssh-ciphers)\n\n* [排查 TLS 错误](/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise/troubleshooting-tls-errors)\n\n  如果你的设备遇到 TLS 问题，可以采取相应措施加以解决。\n\n* [启用私有模式](/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise/enabling-private-mode)\n\n  在专用模式下， GitHub Enterprise Server 要求每个用户登录才能访问安装。\n\n* [启用子域隔离](/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise/enabling-subdomain-isolation)\n\n  可以设置子域隔离，以安全地将用户提供的内容与设备 GitHub Enterprise Server 的其他部分分开。\n\n* [为实例配置主机密钥](/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-host-keys-for-your-instance)\n\n  可通过配置实例用来为传入 SSH 连接生成和播发主机密钥的算法，来提高 GitHub.com 的安全性。\n\n* [配置与实例的 SSH 连接](/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-ssh-connections-to-your-instance)\n\n  可以通过配置客户端可用于建立连接的 SSH 算法来提高安全性 GitHub.com 。\n\n* [配置企业的引用来源策略](/zh/enterprise-server@3.18/admin/configuring-settings/hardening-security-for-your-enterprise/configuring-the-referrer-policy-for-your-enterprise)\n\n  可以通过为跨域请求配置策略来增强 GitHub.com 的隐私保护。\n\n* [/restricting-network-traffic-to-your-enterprise-with-an-ip-allow-list](/zh/enterprise-server@3.18/restricting-network-traffic-to-your-enterprise-with-an-ip-allow-list)\n\n* [/restricting-access-to-githubcom-using-a-corporate-proxy](/zh/enterprise-server@3.18/restricting-access-to-githubcom-using-a-corporate-proxy)"}