Skip to main content

Apache Tomcat

SecTrail CM enables automatic deployment and renewal of SSL certificates by establishing agentless connections to Apache Tomcat application servers.

Connection Requirements​

RequirementDetailDescription
ProtocolSSH (Secure Shell)Secure remote connection protocol
Port22 (default)Standard SSH port or custom port
AuthenticationSSH Key or PasswordAuthentication via SSH key or password
User PermissionKeystore and restart permissionJava keystore creation and Tomcat restart permission

Automated Operations​

SecTrail CM automatically performs the following operations on Apache Tomcat:

  1. Keystore Management: Creating and updating Java KeyStore (JKS/PKCS12)
  2. Certificate Import: Adding SSL certificate and private key to keystore
  3. Configuration Update: Updating Tomcat server.xml SSL connector settings
  4. Service Refresh: Restarting Tomcat service

Configuration Steps​

1. Creating Tomcat Linux User​

Navigate to Automation > Device Users and create a user for Tomcat.

2. Adding Tomcat Device to SecTrail CM​

Click Automation > Devices > Add New Device button and enter the following information:

Tomcat Device Creation

  • Name: Provide a descriptive name for the device
  • Device Users: Select the user created in Step 1
  • IP: Enter the IP address of the Tomcat server
  • Device Type: Select Apache Tomcat Linux from the dropdown menu
  • Become Method: Select privilege escalation method (e.g., sudo)
Automatic Discovery

After the Tomcat device is added to SecTrail CM, the IP addresses and ports of all Virtual Servers defined on the device are automatically included in the discovery period and scanned regularly.

3. Viewing Device Information​

After the device is added, it will be displayed in the Automation > Devices list. Click on the row to view device details:

Tomcat Device Details and Virtual Server List

  • Port: SSL ports that Tomcat listens on (e.g., 8446, 8448)
  • Server Name: Virtual server IP address (e.g., 10.34.24.42)
  • Others: Current SSL configuration details
  • Deploy: For certificate deployment

Certificate Deployment​

Step 1: Virtual Server and Certificate Selection​

  1. Select your Tomcat device from Automation > Devices
  2. In the device details, find the Virtual Server where you want to deploy the certificate
  3. Click the Deploy button on the relevant row
  4. In the Deploy Certificate window that opens:
    • Virtual Servers: Target Virtual Server information is displayed (IP and port)
    • Certificate: Select the certificate you want to deploy from the dropdown menu

Certificate Deployment Screen

Step 2: Starting the Deployment Process​

Click the Deploy button to start the certificate deployment process.

Step 3: Process Tracking​

The deployment process can be tracked from Automation > Processes:

Tomcat Deployment Operations

Operation Details​

The following steps are performed during deployment:

StepOperation Description
1Configuration backup file is created
2JKS (Java KeyStore) file is created and certificate is loaded
3Changes are made in the configuration file
4Tomcat service is restarted

Rollback Operation​

The Manual Rollback feature can be used in case of issues after certificate deployment.

Automatic Rollback

If an error occurs at any step during the deployment process, the system automatically performs a rollback and all changes are reverted.

Rollback Steps​

  1. Navigate to Automation > Processes
  2. Find the operation you want to rollback
  3. Use the Manual-Rollback option in the Status column
  4. Confirm

Operations During Rollback​

StepOperation
1Original configuration is restored
2Tomcat service is restarted
3Newly created keystore file is removed
4Backup and temporary files are cleaned up