How to enable/disable HTTP Strict-Transport-Security (HSTS) for a domain in Plesk?

Updated January 06, 2024 23:26

Plesk for Windows kb: how-to Plesk for Linux ABT: Group B

Applicable to:

Note: A valid SSL certificate must be installed on the website, otherwise it'll not be accessible.

Note: The HSTS header won't be sent while the preferred domain is "www". There is an UserVoice created to improve this behavior

Log into Plesk
Install SSL It! extension in Extensions
Navigate to Domains > example.com > Hosting Settings and make sure SSL/TLS support is enabled
Navigate to Domains > example.com > SSL/TLS Certificates
Click on the HSTS button:
Configure the HSTS options and click on Enable (or Disable) HSTS: