Skip to content

Can I deploy the server without an SSL certificate?

Rationale

Nanitor is a security product and therefore we strongly advise against running the server on top of HTTP. This is because it would compromise the security model and send sensitive information in plain text.

Remediation

If an organization does not have Microsoft Certification Services in its environment we strongly suggest that it is installed, or an alternative CA if desired. Nanitor creates a CSR which can then be easily signed and then trusted by the domain.