Configure Secure Code Uploads

We recommend that you require two-factor authentication to upload code to the staging instance. The first factor is username and password and the second factor is a client certificate. We also recommend that you disallow code uploads to the production instance. Use code replication to propagate code from staging to production.

  1. See if two-factor authentication is required for uploading code to your staging instance and enable if necessary:
    1. Log in to Business Manager on the staging instance as a user with administrative privileges.
    2. Go to Adminstration > Site Development > Development Setup.
    3. Look at the status message under WebDAV Access, Cartridges.
      If the message is A client certificate is required to upload code to this instance type, two-factor authentication is already enabled. If the message is A client certificate isn't required to upload code to this instance, two factor-authentication isn’t enabled and you must enable it, as described in the next step.
    4. To enable two-factor authentication, go to Administration > Global Preferences > Security > Access Restriction and select Require client certificate for code uploads.
      When you require the client certificate for code uploads, the option to configure this setting is no longer available in Business Manager. Only Salesforce Customer Support can revert the setting.
  2. See if code uploads are allowed to your production instance and disallow if necessary:
    1. Log in to Business Manager on the production instance as a user with administrative privileges.
    2. Go to Adminstration > Site Development > Development Setup.
    3. Look at the status message under WebDAV Access, Cartridges.
      If the message is Uploading code to this instance type isn't allowed, code uploads are disallowed to the production instance. If the message is Uploading code to this instance type is allowed, code uploads are allowed to production and you must disallow uploads, as described in the next step.
    4. To disallow code uploads, go to Administration > Global Preferences > Security > Access Restriction and select Disallow code uploads.
      When you disallow code uploads, the option to configure this setting is no longer available in Business Manager. Only Salesforce Customer Support can revert the setting.
X Privacy Update: We use cookies to make interactions with our websites and services easy and meaningful, to better understand how they are used and to tailor advertising. By continuing to use this site you are giving us your consent to do this.