Core Docs - Supporting Rock - Intro to Internal Hosting

Rock Version: v19.0
Last Modified: 2026-07-28 9:35 AM

Looking for information on how to host Rock internally? Well look no further. In this step-by-step guide we'll walk through the process of getting Rock up and running. Before we jump in, let's cover a few things to make sure we get started off on the right foot.

System Requirements

Getting the hardware right up front keeps Rock fast as your ministry grows. Rock is built on Microsoft ASP.NET, so it needs a Windows Server environment to run.

Server, database, browser and mobile versions are all maintained in one place: Rock Technical Requirements. Check that page before you provision or purchase anything, since it always reflects the current minimums. What it does not cover is sizing, so use the following to match hardware to the size of your organization.

Small install - 1,000 to 5,000 records on a single server. 2Ghz dual core CPU or higher, 2GB memory or higher, 1TB storage.

Medium install - 5,000 to 15,000 records across two servers, one web and one database. Give each server a 2Ghz quad core CPU, 8GB memory or higher and 1TB storage.

Large install - 15,000 or more records across two servers, one web and one database. Give each server a 2.5Ghz quad core CPU, 16GB memory or higher and 1TB storage.

Keep PCI compliance in mind.
A single-server setup handles a smaller organization well, but it does not meet PCI requirements, which call for the database and the web host to live in separate environments. If you plan to take payments through your Rock site or store financial information in Rock, use the medium install configuration or an external host.

Storage estimates exclude backups.
If you plan to keep local backups, size your volumes accordingly.

More Info:
For a two-server install, read the Configure a Two-Server Environment article before you start.

Things You'll Need During Installation

Here is a short list of settings that you'll need to complete the Rock installation.

Other Considerations

Windows Updates
Rock's foundation is built upon Microsoft's .NET technology. Since .NET is an ever-evolving technology, we recommend that you install all the latest updates for your Windows Server.

Certificates
As you configure Rock, make sure you purchase and configure an SSL certificate before making it available at a publicly accessible domain. Prices range from $9–$100+ per year, and while the setup may seem daunting, there are plenty of helpful tutorials that walk you through the setup process. Also, you can check with your current domain registrar to see if they offer SSL Certificates. If you’re new to SSL, Google provides a detailed list of best practices. Check out the Configuring IIS article for additional details.

Free SSL Plugin Available
Thanks to the Rock Community, there is an easier option available for configuring SSL. Check out the Acme Certificate plugin in the Rock Shop. This will walk you through getting and installing a free Let's Encrypt certificate - a much easier route for anyone who has never set up website encryption before.  

Encryption Best Practice
You might be wondering where and when you should add your encryption for your website. Every secure website will have an HTTPS address on every page. The simplest way of doing this for each site within Rock is by encrypting at the Site Level. This is done by checking the box for every site at: Admin Tools > CMS Configuration > Sites > Edit Site > Require Encryption. The two Rock sites for which you should enable SSL are the internal RockRMS Site, and the external facing website. Even if you don’t plan to use Rock for your main website, it’s important to protect the information flowing between your server and those who are giving you their information. Users typing http:// addresses in their browsers to visit your pages will be redirected automatically to the secure https:// site when “Require Encryption” is checked.

Now that we have these things covered, let’s begin!