Configuring the server.xml file in Tomcat to enable SSL

Solution ID:    SO5306    Updated:    04/10/2017


Self-signed certificate shows after importing SSL certificate successfully in Tomcat

Expired or old certificate shows after new certificate was successfully installed


Tomcat keeps its configuration information in a server.xml file, which ensures Tomcat is reading the correct keystore file and keystore
.This file also allows server administrators to set the port for secure connections.
If the server.xml file is not configured, or if it is pointing to the wrong keystore, then the server may present the incorrect certificate
to the client browser.


 To configure the server.xml file to enable SSL in Tomcat, please see the information below:
  1. Open the server.xml config file using a text editor (ie. JAKARTA_HOME/conf/server.xml)
  2. Search for the secure element in your config file (try searching for SSL Connector). By default it should look something like this:

    <!-- SSL Connector on Port 443 -->
          port="443" minProcessors="5"
          connectionTimeout="60000" debug="0"
           scheme="https" secure="true">
                 clientAuth="false" protocol="TLS"
                 keystoreFile="insert path to the keystore here"
                 keystorePass="insert keystore password here"

  3. Make sure the "keystoreFile" directive is referencing the correct keystore and the "keystorePass" directive is referencing
    the correct keystore password.
    NOTE: These directives are case-sensitive! Make sure the letters "F" and "P" in "keystoreFile" and "keystorePass" are in uppercase.
  4. If your keystore contains more than one private key alias, please add the "keyAlias" directive to reference the correct private key alias name

    For Example:

    keystoreFile="insert path to the keystore here"
    keystorePass="insert keystore password here"
    keyAlias="insert private key alias here"/>
  5. Save the changes.
  6. Stop and start Tomcat
  7. Verify your installation with the Symantec Installation Checker

          For more information, please refer to Tomcat Support 

          For inforrmation regarding Tomcat 6.0 click here 

Legacy ID



Terms of use for this information are found in Legal Notices

Contact Support

Find Answers


This article is available in the following languages: