Enable SSL in Tomcat for MITS Discover and Report (v10.04 through v11) with an Existing Certificate

The instructions below are for versions 10.0.4 through 11.  If you are running a version prior to 10.0.4, please contact support@whitecupsolutions.comsupport for more information.  If you are running version 12 or newer, you will want to reference one of these articles.

Enable SSL in Tomcat for MITS Discover and Report (v12) with an Existing Certificate

Enable SSL in Tomcat for MITS Discover and MITS Report (v12) (New Certificate Needed)

The following steps are to enable SSL support in the instance of Tomcat that MITS installs and uses.  This is independent of any other instances of Tomcat that may be running on the server.

This configuration may be lost during an upgrade of MITS.  It's likely you'll need to reapply these changes after each upgrade.

A)  Create PFX using existing SSL cert from IIS.

1. From the web server, click Start
2. In the Search programs and files field, type mmc
3. From the Programs list, click mmc.exe
4. At the permission prompt, click Yes
5. From the Microsoft Management Console (MMC), click  File > Add/Remove Snap-in
6. From the list of snap-ins, select Certificates
7. Click Add
8. Select Computer account
9. Click Next
10. Select Local computer (the computer this console is running on)
11. Click Finish
12. In the Add/Remove Snap-in window, click OK
13. Save these console settings for future use
14. Double click on Certificates (Local Computer) in the center window.
15. Double click on the Personal folder, and then on Certificates.
16. Right Click on the Certificate you would like to backup and choose > All Tasks > Export
17. Follow the Certificate Export Wizard to backup your certificate to a .pfx file.  Use the"Personal Information Exchange - PKCS #12 (.PFX)" format.
18. Choose to 'Yes, export the private key'
19. Choose to "Include all certificates in certificate path if possible." (do NOT select the delete Private Key option)
20. Enter a password you will remember
21. Choose to save file on a set location
22. Click Finish
23. You will receive a message > "The export was successful." > Click OK
24. The .pfx file backup is now saved in the location you selected.

Take note of exported PFX filename and password used.  You will need this information later.

B)  Make a backup of the server.xml file.  It is located here:

[MITS Install Location]/webserver/conf/server.xml

C)  Edit the server.xml file by making the changes highlighted in red below.  Uncomment the SSL connector by removing the <!-- and --> from the ends.

<!--

<Connector URIEncoding="UTF-8" compressableMimeType="text/html,text/xml,text/plain,text/css,text/javascript,application/javascript,image/svg+xml" compression="on" connectionTimeout="20000" maxPostSize="16777216" port="8080" protocol="HTTP/1.1" address="127.0.0.1" redirectPort="443" useSendfile="false"/>

<Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" URIEncoding="UTF-8" keystoreFile="conf/wildcard.cert.pfx" keystoreType="PKCS12" keystorePass="password_goes_here"/>

-->

***Important notes***

1.) Please verify that the server.xml contains the "address=127.0.0.1"

2.) Additionally, the Connector should ALWAYS remain commented in. 

D)  Restart the MITS service to pick up new settings.

E)  Reconfigure any firewall port(s) to allow 443 to this server.