Configure Tomcat and test the server

2min

Tomcat configuration is stored in Tomcat_HOME/conf/server.xml. The following code shows an example Connector configuration:
JS
    <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true">
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig>
            <Certificate certificateKeystoreFile=""
             certificateKeystoreType="PKCS11"
             certificateKeystoreProvider="SunPKCS11-Futurex"
             certificateKeyAlias="tomcatdemo1"
             certificateKeystorePassword="safest"
             type="EC" />
        </SSLHostConfig>
    </Connector>
    <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true">
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig>
            <Certificate certificateKeystoreFile=""
             certificateKeystoreType="PKCS11"
             certificateKeystoreProvider="SunPKCS11-Futurex"
             certificateKeyAlias="tomcatdemo1"
             certificateKeystorePassword="safest"
             type="EC" />
        </SSLHostConfig>
    </Connector>
﻿
Test the Tomcat server
1
Start up the Tomcat server: Tomcat_home\bin\startup.exe
2
Open a web browser and go to https://localhost:8443.
3
Select the security icon to the left of the URL. 
The certificate details for Issuer and Subject should show that Tomcat is using your certificates.
﻿

Create a Java KeyStore

Appendix: Set up Tomcat server by using a third-party (external) CA