{"id":13029,"date":"2017-12-21T15:59:18","date_gmt":"2017-12-21T15:59:18","guid":{"rendered":"https:\/\/ephesoft.com\/docs\/?p=13029"},"modified":"2022-07-01T10:04:37","modified_gmt":"2022-07-01T17:04:37","slug":"how-to-set-ssl-tls-in-tomcat","status":"publish","type":"docs","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/","title":{"rendered":"How to Set SSL\/TLS in Tomcat"},"content":{"rendered":"<p>This article explains the process to enable SSL\/TLS authentication on Tomcat.<\/p>\n<h2><a id=\"post-13029-_s8742dlblt1c\"><\/a>Prerequisites<\/h2>\n<ul>\n<li>You will need access to a trusted Certificate Authority (CA).\n<ul>\n<li>If you do not have access to a trusted CA, you will need OpenSSL.<\/li>\n<\/ul>\n<\/li>\n<li>You will need Perl.<\/li>\n<\/ul>\n<h2><a id=\"post-13029-_beg9vpfw256\"><\/a>Create Self-Signed Certificates Using OpenSSL<\/h2>\n<p><strong>Note<\/strong>: If you have access to a trusted Certificate Authority (CA) and already have the <strong>cacert.pem<\/strong>, <strong>servercert.pem<\/strong> and <strong>serverkey.pem<\/strong> files, skip to <a href=\"#post-13029-_2ip7vt532nre\">Generate Keystores<\/a>.<\/p>\n<p>To create a self-signed certificate using OpenSSL, perform the following steps:<\/p>\n<ol>\n<li>Locate <strong>OpenSSL CA.pl<\/strong> file as this file is required to create a dummy CA certificate file. This will be inside the <strong>bin<\/strong> directory within the OpenSSL directory.<\/li>\n<li>Create a temporary directory to store the certificates and navigate to it in the command line<\/li>\n<li>Execute the following command based on your operating system (you may need to edit the path accordingly)<\/li>\n<\/ol>\n<p><strong>Linux<\/strong><\/p>\n<pre>\/usr\/lib\/ssl\/misc\/CA.pl -newca<\/pre>\n<p><strong>Windows<\/strong><\/p>\n<pre>C:\\OpenSSL-Win32\\bin\\CA.pl -newca<\/pre>\n<figure id=\"attachment_45935\" aria-describedby=\"caption-attachment-45935\" style=\"width: 749px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45935\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-9.png\" alt=\"\" width=\"749\" height=\"859\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-9.png 749w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-9-262x300.png 262w\" sizes=\"(max-width: 749px) 100vw, 749px\" \/><figcaption id=\"caption-attachment-45935\" class=\"wp-caption-text\"><em>Figure 1. Create Certificate and Private Key<\/em><\/figcaption><\/figure>\n<p>This creates <strong>demoCA\/cacert.pem<\/strong> (CA Certificate) and <strong>demoCA\/private\/cakey.pem<\/strong> (private key)<\/p>\n<ol start=\"4\">\n<li>Make a server certificate signing request (CSR) using the following command:<\/li>\n<\/ol>\n<pre>openssl req -newkey rsa:2048 -nodes -keyout newreq.pem -out newreq.pem<\/pre>\n<figure id=\"attachment_45936\" aria-describedby=\"caption-attachment-45936\" style=\"width: 753px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45936\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-10.png\" alt=\"\" width=\"753\" height=\"418\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-10.png 1015w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-10-300x167.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-10-768x427.png 768w\" sizes=\"(max-width: 753px) 100vw, 753px\" \/><figcaption id=\"caption-attachment-45936\" class=\"wp-caption-text\"><em>Figure 2. Create CSR<\/em><\/figcaption><\/figure>\n<p><strong>Note: <\/strong>The <strong>Common Name <\/strong>is the fully qualified domain name (FQDN) of your server. This must match the servername\/hostname.<\/p>\n<ol start=\"5\">\n<li>Execute the following command based on your operating system. You may need to edit the path accordingly.<\/li>\n<\/ol>\n<p><strong>Linux<\/strong><\/p>\n<pre>\/usr\/lib\/ssl\/misc\/CA.pl -sign<\/pre>\n<p><strong>Windows<\/strong><\/p>\n<pre>C:\\OpenSSL-Win32\\bin\\CA.pl -sign<\/pre>\n<figure id=\"attachment_45937\" aria-describedby=\"caption-attachment-45937\" style=\"width: 753px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45937\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-11.png\" alt=\"\" width=\"753\" height=\"541\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-11.png 1032w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-11-300x215.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-11-1024x735.png 1024w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-11-768x551.png 768w\" sizes=\"(max-width: 753px) 100vw, 753px\" \/><figcaption id=\"caption-attachment-45937\" class=\"wp-caption-text\"><em>Figure 3. Certificate Created<\/em><\/figcaption><\/figure>\n<p>You should have the following three files:<\/p>\n<ul>\n<li><strong>cacert.pem<\/strong><\/li>\n<li><strong>newreq.pem<\/strong><\/li>\n<li><strong>newcert.pem<\/strong><\/li>\n<\/ul>\n<ol start=\"6\">\n<li>Rename <strong>newreq.pem<\/strong> to <strong>serverkey.pem<\/strong>.<\/li>\n<li>Rename <strong>newcert.pem<\/strong> to <strong>servercert.pem<\/strong>.<\/li>\n<\/ol>\n<h2><a id=\"post-13029-_2ip7vt532nre\"><\/a>Generate Keystores<\/h2>\n<p>You should have the following three files:<\/p>\n<ul>\n<li><strong>cacert.pem<\/strong><\/li>\n<li><strong>serverkey.pem<\/strong><\/li>\n<li><strong>servercert.pem<\/strong><\/li>\n<\/ul>\n<ol start=\"8\">\n<li>Convert the <strong>servercert.pem<\/strong> file to PKC12 format (*.p12) using the following command:<\/li>\n<\/ol>\n<pre>openssl pkcs12 -export -in servercert.pem -inkey serverkey.pem -out servercert.p12 -name servercertificate<\/pre>\n<p><strong>Note<\/strong>: The converted file (servercert.p12) acts as a server certificate and is used to generate keystore. When prompted for Export Password, enter a password and keep the password safe.<\/p>\n<ol start=\"9\">\n<li>Create a java keystore file by converting the <strong>servercert.p12<\/strong> file to Java Keytool format by using the following command:<\/li>\n<\/ol>\n<pre>keytool -importkeystore -destkeystore servercert.jks -srckeystore servercert.p12 -srcstoretype PKCS12 -alias servercertificate<\/pre>\n<p><strong>Note<\/strong>: When prompted for the <strong>destination keystore password<\/strong>, enter a password and keep it safe. It will be used as the <strong>keystore password<\/strong> in the <strong>server.xml<\/strong> file. Also, when prompted for the source keystore password, enter the export password for input <strong>servercert.p12<\/strong> file created in the previous step (Step 8).<\/p>\n<ol start=\"10\">\n<li>Navigate to the demoCA directory (cd demoCA) and create a java truststore file by converting the <strong>cacert.pem<\/strong> file to Java Keytool format by using the following command:<\/li>\n<\/ol>\n<pre>keytool -import -keystore cacerts.jks -alias cacert -file cacert.pem<\/pre>\n<p><strong>Note<\/strong>: When prompted for <strong>keystore password<\/strong>, enter a password and keep the password safe. It will be used as the <strong>truststore password<\/strong> in the <strong>server.xml <\/strong>file.<\/p>\n<figure id=\"attachment_45938\" aria-describedby=\"caption-attachment-45938\" style=\"width: 718px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45938\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-12.png\" alt=\"\" width=\"718\" height=\"564\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-12.png 945w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-12-300x236.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-12-768x604.png 768w\" sizes=\"(max-width: 718px) 100vw, 718px\" \/><figcaption id=\"caption-attachment-45938\" class=\"wp-caption-text\"><em>Figure 4. Add Certificate to Keystore<\/em><\/figcaption><\/figure>\n<h2><a id=\"post-13029-_nu7yz69u5kzt\"><\/a>Generate a Certificate Signing Request (CSR)<\/h2>\n<ol start=\"11\">\n<li>Create a new key-CSR pairing<\/li>\n<\/ol>\n<pre>keytool -genkey -alias servercertificate -keyalg RSA -keysize 2048 -keystore servercert.jks<\/pre>\n<ol start=\"12\">\n<li>Enter your DN information and confirm it with a &#8220;yes&#8221; when prompted<\/li>\n<li>Create a new Certificate Signing Request (CSR)<\/li>\n<\/ol>\n<pre>keytool -certreq -alias servercertificate -keyalg RSA -file yourdomain.csr -keystore servercert.jks<\/pre>\n<ol start=\"14\">\n<li>Enter your keystore password.<\/li>\n<li>Send the CSR to your Certificate Authority (CA).<\/li>\n<li>Make a copy of <strong>servercert.jks<\/strong> and rename the copy file as <strong>cacerts.jks.<\/strong><\/li>\n<li>Once you have received the <strong>cacert.pem<\/strong> and<strong> servercert.pem<\/strong> from your CA, execute the following commands to import the certificates.<\/li>\n<\/ol>\n<pre>keytool -import -keystore cacerts.jks -alias cacert -file cacert.pem\r\nkeytool -import -keystore servercert.jks -alias servercertificate -file servercert.pem<\/pre>\n<h2><a id=\"post-13029-_ov8s9hb5zevh\"><\/a>Configure SSL\/TLS Using Generated Certificates<\/h2>\n<p>To configure SSL\/TLS in Ephesoft Transact, perform the following steps.<\/p>\n<ol>\n<li>Take a backup of the existing <strong>server.xml<\/strong> file located at <strong>[<em>Ephesoft_Directory<\/em>]<\/strong>\/JavaAppServer\/conf.<\/li>\n<li>Open the <strong>server.xml <\/strong>in edit mode and locate the existing HTTP\/HTTPS connector.<\/li>\n<\/ol>\n<figure id=\"attachment_45939\" aria-describedby=\"caption-attachment-45939\" style=\"width: 829px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45939\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-13.png\" alt=\"\" width=\"829\" height=\"107\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-13.png 829w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-13-300x39.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-13-768x99.png 768w\" sizes=\"(max-width: 829px) 100vw, 829px\" \/><figcaption id=\"caption-attachment-45939\" class=\"wp-caption-text\"><em>Figure 5. Locate HTTPS Connector<\/em><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>Comment the existing connector by surrounding the connector tag in comment tags.<\/li>\n<\/ol>\n<figure id=\"attachment_45940\" aria-describedby=\"caption-attachment-45940\" style=\"width: 846px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45940\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-14.png\" alt=\"\" width=\"846\" height=\"130\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-14.png 846w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-14-300x46.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-14-768x118.png 768w\" sizes=\"(max-width: 846px) 100vw, 846px\" \/><figcaption id=\"caption-attachment-45940\" class=\"wp-caption-text\"><em>Figure 6. Comment Out Existing Connector<\/em><\/figcaption><\/figure>\n<ol start=\"4\">\n<li>Locate the comment \u201cConnector for enabling PIV\/CAC configuration\u201d. Uncomment the following lines:<\/li>\n<\/ol>\n<figure id=\"attachment_45941\" aria-describedby=\"caption-attachment-45941\" style=\"width: 786px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45941\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-15.png\" alt=\"\" width=\"786\" height=\"232\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-15.png 786w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-15-300x89.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-15-768x227.png 768w\" sizes=\"(max-width: 786px) 100vw, 786px\" \/><figcaption id=\"caption-attachment-45941\" class=\"wp-caption-text\"><em>Figure 7. Uncomment New Connector Protocol<\/em><\/figcaption><\/figure>\n<p>This connector includes the following configurable properties:<\/p>\n<table>\n<tbody>\n<tr bgcolor=\"1f3864\">\n<td><span style=\"color: #ffffff\"><strong>Property<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff\"><strong>Value<\/strong><\/span><\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>protocol<\/td>\n<td>org.apache.coyote.http11.Htp11NioProtocol<\/td>\n<\/tr>\n<tr>\n<td>port<\/td>\n<td>8080 (or 8443)<\/p>\n<p><strong>Note<\/strong>: You can change this from the default 8080 but take note of this for the following sections.<\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>maxThreads<\/td>\n<td>2000<\/td>\n<\/tr>\n<tr>\n<td>clientAuth<\/td>\n<td>false<\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>scheme<\/td>\n<td>https<\/td>\n<\/tr>\n<tr>\n<td>keepAliveTimeout<\/td>\n<td>-1<\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>connectionTimeout<\/td>\n<td>900000<\/td>\n<\/tr>\n<tr>\n<td>secure<\/td>\n<td>true<\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>SSLEnabled<\/td>\n<td>true<\/td>\n<\/tr>\n<tr>\n<td>sessionTimeout<\/td>\n<td>30<\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>truststoreFile<\/td>\n<td>Complete path of truststore file location.<\/p>\n<p><strong>Example: <\/strong>\u201cC:\\Ephesoft\\certs\\truststore.jks\u201d<\/td>\n<\/tr>\n<tr>\n<td>truststorePass<\/td>\n<td>Password for truststore.<\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>keystoreFile<\/td>\n<td>Complete path of keystore file location.<\/p>\n<p><strong>Example: <\/strong>\u201cC:\\Ephesoft\\certs\\truststore.jks\u201d<\/td>\n<\/tr>\n<tr>\n<td>keystorePass<\/td>\n<td>Password for keystore.<\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>maxKeepAliveRequests<\/td>\n<td>200<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Note<\/strong>: Make sure you replace the path of the certificates with the actual certificate locations.<\/p>\n<p>The following files will also need to be configured:<\/p>\n<ul>\n<li>dcma-batch.properties<\/li>\n<li>dcma-workflows.properties<\/li>\n<li>web.xml<\/li>\n<\/ul>\n<h3><a id=\"post-13029-_s70szdiuesmf\"><\/a>dcma-batch.properties<\/h3>\n<p>This file is located at <strong>[<em>Ephesoft_Directory<\/em>]<\/strong>\\Application\\WEB-INF\\classes\\META-INF.<\/p>\n<ol start=\"5\">\n<li>Take a backup of the <strong>dcma-batch.properties <\/strong>file.<\/li>\n<li>Update the <strong>batch.base_http_url<\/strong> to include https protocol, the correct port, and correct hostname (see note for versions 2020.1.06 and above).<\/li>\n<\/ol>\n<p><strong><img decoding=\"async\" width=\"523\" height=\"23\" class=\"wp-image-45942\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-16.png\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-16.png 523w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-16-300x13.png 300w\" sizes=\"(max-width: 523px) 100vw, 523px\" \/><\/strong><\/p>\n<p><b>Note:<\/b><span style=\"font-weight: 400\"> For 2020.1.06 and above, the batch.base_http_url should include <strong>\/dcma<\/strong> after the port, such as:\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">batch.base_http_url=https\\:\/\/localhost\\:8443<\/span><b>\/dcma<\/b><span style=\"font-weight: 400\">\/dcma-batches<\/span><\/p>\n<h3><a id=\"post-13029-_r0md9q3fyknw\"><\/a>dcma-workflows.properties<\/h3>\n<p>This file is located at <strong>[<em>Ephesoft_Directory<\/em>]<\/strong>\\Application\\WEB-INF\\classes\\META-INF.<\/p>\n<ol start=\"7\">\n<li>Take a backup of the <strong>dcma-workflows.properties <\/strong>file.<\/li>\n<li>Update the <strong>wb.hostURL <\/strong>to include https protocol, correct port, and correct host.<\/li>\n<\/ol>\n<p><strong><img decoding=\"async\" width=\"400\" height=\"25\" class=\"wp-image-45943\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-17.png\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-17.png 400w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-17-300x19.png 300w\" sizes=\"(max-width: 400px) 100vw, 400px\" \/><\/strong><\/p>\n<h3><a id=\"post-13029-_5t6skn7hqdme\"><\/a>web.xml<\/h3>\n<p><strong>Note<\/strong>: This step is only necessary if you have changed the port from the default 8080.<\/p>\n<p>This file is located at <strong>[<em>Ephesoft_Directory<\/em>]<\/strong>\\Application\\WEB-INF.<\/p>\n<ol start=\"9\">\n<li>Take a backup of the <strong>web.xml <\/strong>file.<\/li>\n<li>Modify the following <strong>&lt;context-param&gt; <\/strong>entries:<\/li>\n<\/ol>\n<table>\n<tbody>\n<tr bgcolor=\"1f3864\">\n<td><span style=\"color: #ffffff\"><strong>Parameter Name<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff\"><strong>Updated Value<\/strong><\/span><\/td>\n<\/tr>\n<tr bgcolor=\"d9e2f3\">\n<td>port<\/td>\n<td>Enter the port listed in the <strong>server.xml <\/strong>file. Update this only if you have updated the port number.<\/p>\n<p><figure id=\"attachment_45944\" aria-describedby=\"caption-attachment-45944\" style=\"width: 367px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45944\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-18.png\" alt=\"\" width=\"367\" height=\"79\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-18.png 367w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-18-300x65.png 300w\" sizes=\"(max-width: 367px) 100vw, 367px\" \/><figcaption id=\"caption-attachment-45944\" class=\"wp-caption-text\"><em>Figure 8. Modify Port Parameter<\/em><\/figcaption><\/figure><\/td>\n<\/tr>\n<tr>\n<td>protocol<\/td>\n<td>Enter <strong>https<\/strong>.<\/p>\n<p><figure id=\"attachment_45945\" aria-describedby=\"caption-attachment-45945\" style=\"width: 358px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45945\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-19.png\" alt=\"\" width=\"358\" height=\"89\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-19.png 358w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-19-300x75.png 300w\" sizes=\"(max-width: 358px) 100vw, 358px\" \/><figcaption id=\"caption-attachment-45945\" class=\"wp-caption-text\"><em>Figure 9. Modify Protocol Parameter<\/em><\/figcaption><\/figure><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"11\">\n<li>Restart the Ephesoft Transact service.<\/li>\n<\/ol>\n<h2><a id=\"post-13029-_pre2gsh1j7ys\"><\/a>Install Certificates<\/h2>\n<ol start=\"12\">\n<li>Copy the <strong>cacert.pem <\/strong>to the <strong>[<em>Ephesoft_Directory<\/em>]<\/strong>\\Certs folder.<\/li>\n<li>Rename the file extension to crt (<strong>cacert.crt<\/strong>).<\/li>\n<li>Right-click the <strong>cacert.crt <\/strong>file and select <strong>Install Certificate<\/strong>.<\/li>\n<\/ol>\n<figure id=\"attachment_45946\" aria-describedby=\"caption-attachment-45946\" style=\"width: 470px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45946\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-20.png\" alt=\"\" width=\"470\" height=\"192\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-20.png 470w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-20-300x123.png 300w\" sizes=\"(max-width: 470px) 100vw, 470px\" \/><figcaption id=\"caption-attachment-45946\" class=\"wp-caption-text\"><em>Figure 10. Install Certificate<\/em><\/figcaption><\/figure>\n<p>The <strong>Certificate Import Wizard <\/strong>will run.<\/p>\n<ol start=\"15\">\n<li>Select <strong>Local Machine <\/strong>and click <strong>Next<\/strong>.<\/li>\n<\/ol>\n<figure id=\"attachment_45947\" aria-describedby=\"caption-attachment-45947\" style=\"width: 441px\" class=\"wp-caption alignnone\"><img decoding=\"async\" class=\"wp-image-45947\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-21.png\" alt=\"\" width=\"441\" height=\"431\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-21.png 535w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-21-300x293.png 300w\" sizes=\"(max-width: 441px) 100vw, 441px\" \/><figcaption id=\"caption-attachment-45947\" class=\"wp-caption-text\"><em>Figure 11. Certificate Import Wizard<\/em><\/figcaption><\/figure>\n<ol start=\"16\">\n<li>Select <strong>Place all certificates in the following store <\/strong>and click <strong>Browse<\/strong>. This will open a dialog prompting you to select the certificate store.<\/li>\n<li>Select <strong>Trusted Root Certification Authorities <\/strong>and click <strong>OK<\/strong>.<\/li>\n<li>Click <strong>Next <\/strong>and <strong>Finish<\/strong> to complete the import.<\/li>\n<li>Verify the certificate imported successfully.\n<ol type=\"a\">\n<li>From the taskbar, search \u201ccert\u201d.<\/li>\n<li>Select <strong>Manage computer certificates<\/strong>.<\/li>\n<li>Go to <strong>Trusted Root Certification Authorities <\/strong>&gt; <strong>Certificates <\/strong>and verify your certificate is listed on the right-hand side.<\/li>\n<\/ol>\n<\/li>\n<li>Open Ephesoft Transact with https.<\/li>\n<\/ol>\n<h2><a id=\"post-13029-_j7zp7tf1dl50\"><\/a>Conclusion<\/h2>\n<p>This completes the overview of how to enable SSL\/TLS authentication on Tomcat.<\/p>\n","protected":false},"featured_media":0,"parent":22092,"menu_order":8,"comment_status":"closed","ping_status":"closed","template":"","doc_tag":[10972,10971,10969,10970,10968],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v19.0 (Yoast SEO v22.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Set SSL\/TLS in Tomcat | Ephesoft Docs<\/title>\n<meta name=\"description\" content=\"This article explains the process to enable SSL\/TLS authentication on Tomcat. You will need access to a trusted certificated authority (CA).\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Set SSL\/TLS in Tomcat\" \/>\n<meta property=\"og:description\" content=\"This article explains the process to enable SSL\/TLS authentication on Tomcat. You will need access to a trusted certificated authority (CA).\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/\" \/>\n<meta property=\"og:site_name\" content=\"Ephesoft Docs\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-01T17:04:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-9.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/\",\"url\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/\",\"name\":\"How to Set SSL\/TLS in Tomcat | Ephesoft Docs\",\"isPartOf\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\"},\"datePublished\":\"2017-12-21T15:59:18+00:00\",\"dateModified\":\"2022-07-01T17:04:37+00:00\",\"description\":\"This article explains the process to enable SSL\/TLS authentication on Tomcat. You will need access to a trusted certificated authority (CA).\",\"breadcrumb\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ephesoft.com\/docs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Transact\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"System Configuration\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Security Configuration\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"How to Set SSL\/TLS in Tomcat\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\",\"url\":\"https:\/\/ephesoft.com\/docs\/\",\"name\":\"Ephesoft Docs\",\"description\":\"Intelligent Document Processing Made Easy\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ephesoft.com\/docs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Set SSL\/TLS in Tomcat | Ephesoft Docs","description":"This article explains the process to enable SSL\/TLS authentication on Tomcat. You will need access to a trusted certificated authority (CA).","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"How to Set SSL\/TLS in Tomcat","og_description":"This article explains the process to enable SSL\/TLS authentication on Tomcat. You will need access to a trusted certificated authority (CA).","og_url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/","og_site_name":"Ephesoft Docs","article_modified_time":"2022-07-01T17:04:37+00:00","og_image":[{"url":"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/12\/word-image-9.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/","url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/","name":"How to Set SSL\/TLS in Tomcat | Ephesoft Docs","isPartOf":{"@id":"https:\/\/ephesoft.com\/docs\/#website"},"datePublished":"2017-12-21T15:59:18+00:00","dateModified":"2022-07-01T17:04:37+00:00","description":"This article explains the process to enable SSL\/TLS authentication on Tomcat. You will need access to a trusted certificated authority (CA).","breadcrumb":{"@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/how-to-set-ssl-tls-in-tomcat\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ephesoft.com\/docs\/"},{"@type":"ListItem","position":2,"name":"Transact","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/"},{"@type":"ListItem","position":3,"name":"System Configuration","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/"},{"@type":"ListItem","position":4,"name":"Security Configuration","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/"},{"@type":"ListItem","position":5,"name":"How to Set SSL\/TLS in Tomcat"}]},{"@type":"WebSite","@id":"https:\/\/ephesoft.com\/docs\/#website","url":"https:\/\/ephesoft.com\/docs\/","name":"Ephesoft Docs","description":"Intelligent Document Processing Made Easy","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ephesoft.com\/docs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"comment_count":0,"_links":{"self":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/13029"}],"collection":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/comments?post=13029"}],"version-history":[{"count":2,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/13029\/revisions"}],"predecessor-version":[{"id":51460,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/13029\/revisions\/51460"}],"up":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/22092"}],"next":[{"title":"Certificate error while using web scanner module - EphesoftTransactScannerService","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/certificate-error-while-using-web-scanner-module-ephesofttransactscannerservice\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/15915"}],"prev":[{"title":"Apache Server SSL setup with Ephesoft Transact on Linux","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/security-configuration\/apache-server-ssl-setup-with-ephesoft-on-linux\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/11950"}],"wp:attachment":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/media?parent=13029"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/doc_tag?post=13029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}