> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Apache Tomcat

> Instructions for editing server.xml to configure Apache Tomcat for TLS offloading.

Use the following samples to edit the configuration file for your environment. Find the Tomcat configuration in `Tomcat_HOME/conf/server.xml`.

The following sample shows an example configuration **Connector**:

```text expandable lines wrap title="Text" theme={null}
<Connector port="8443" scheme="https" secure="true" SSLEnabled="true" maxThreads="150" keyAlias="Apache Tomcat:futurex-tomcat:C" clientAuth="false" keystore="NONE" keystorePass="password" keystoreType="PKCS11" keystoreProvider="Futurex">
</Connector>
```

The following is an example `server.xml` file:

```xml expandable lines wrap title="XML" theme={null}
    <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true">
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig>
            <Certificate certificateKeystoreFile=""
             certificateKeystoreType="PKCS11"
             certificateKeystoreProvider="SunPKCS11-Futurex"
             certificateKeyAlias="Apache Tomcat:futurex-tomcat:C"
             certificateKeystorePassword="identity_password"
             type="EC" />
        </SSLHostConfig>
    </Connector>
```

<Note>
  In the certificateKeystorePassword definition, set the identity\_password to the CryptoHub identity password configured inside the `<CRYPTO-OPR-PASS>` tag in the `fxpkcs11.cfg` file.
</Note>