Web Folder Security

web folder functionality was previously called simple file networking (sfn) this page outlines best practices for securely operating a web folder server for brightsign players authentication we recommend password protecting the web folder directory to prevent a third party from retrieving presentation content there are two types of http authentication supported by the web folder protocol https //en wikipedia org/wiki/digest access authentication negotiates with the server using a hashed password this is the recommended authentication method https //en wikipedia org/wiki/basic access authentication negotiates with the server using an un hashed password because the password is vulnerable to interception, you should only use this method if digest authentication cannot be implemented on the server to enable digest authentication on a player, enter a username and password under web folder authentication during the player setup process digest authentication is used by default—if you wish to use basic authentication instead, you must check the enable basic authentication box if the player is already set up without authentication, you will need to perform player setup again to enable authentication directory indexing if you cannot password protect the directory containing brightsign content and presentation files (i e the url for web folder specified during device setup), you should restrict indexing of this directory this will prevent search engine crawlers from making an index of your presentation files publicly searchable and viewable apache include the "options –indexes" line in either the \<directory> directive or in the htaccess file stored in the directory windows server (iis) see this page https //technet microsoft com/en us/library/cc731109%28v=ws 10%29 aspx?f=255\&mspperror= 2147217396 for instructions nginx see this page http //nginx org/en/docs/http/ngx http autoindex module html for instructions