diff --git a/templates/default/SiteConfiguration.erb b/templates/default/SiteConfiguration.erb
index 5c2961fcb278ad6f901001ebc3fb7760c2858988..f0309746b6b0ab371d2b2a0b088fa37caa6902d6 100644
--- a/templates/default/SiteConfiguration.erb
+++ b/templates/default/SiteConfiguration.erb
@@ -12,10 +12,10 @@ $typo_db_host = '127.0.0.1';
 
 // SSL settings for the backend login
 //
-// Notes:
-// - The value 2 is used in the live system only. It will redirect any normal http access to an https one.
-// - The value 0 is used in the testing and devel systems, because we doesn't have ssl support here!!
-$GLOBALS['TYPO3_CONF_VARS']['BE']['lockSSL'] = 0;
+// Relevant Values:
+// - 2 - Enforce SSL
+// - 0 - Allow any
+$GLOBALS['TYPO3_CONF_VARS']['BE']['lockSSL'] = 2;
 
 // Change install tool password to joh316
 $GLOBALS['TYPO3_CONF_VARS']['BE']['installToolPassword'] = '$P$CCuX8EzzYaSOHJS5o32X9Uk3Vg79ji1';
@@ -34,9 +34,13 @@ if (!$GLOBALS['TYPO3_DISABLE_DEBUG']) {
 	$GLOBALS['TYPO3_CONF_VARS']['SYS']['displayErrors'] = 1;
 	$GLOBALS['TYPO3_CONF_VARS']['SYS']['enableDeprecationLog'] = 0;
 	$GLOBALS['TYPO3_CONF_VARS']['SYS']['errorHandlerErrors'] = 'E_ALL ^ E_NOTICE';
-	$GLOBALS['TYPO3_CONF_VARS']['SYS']['clearCacheSystem'] = TRUE;
 	$GLOBALS['TYPO3_CONF_VARS']['SYS']['systemLogLevel'] = 0;
 	$GLOBALS['TYPO3_CONF_VARS']['SYS']['exceptionalErrors'] = 28674;
+
+	// Don't use this in live instances as normal user may not be allowed to clear the dangerous system cache!
+	// Use the following setting for dedicated users/groups to give them the permission.
+	// options.clearCache.system = 1
+	$GLOBALS['TYPO3_CONF_VARS']['SYS']['clearCacheSystem'] = TRUE;
 }
 
 ?>