Skip to main content
Archived

FME Server configuration SSL with PFX file

  • August 27, 2018
  • 1 reply
  • 21 views
  • siennaatsafe
    siennaatsafe
  • ric
  • laurawatsafe
    laurawatsafe

Hi, If you want to configure HTTPS for your's FME Server with a PFX file.

Go to Configuration page and at the Tomcat configuration read and open the server.xml.

So you must add this parameter --> keystoreType="PKCS12" and modify this another parameters keystoreFile="<FMEServerDir>Utilities omcatyourfile.pfx" keystorePass="<your_password>"

Like This :

    <Connector protocol="org.apache.coyote.http11.Http11NioProtocol"port="443" minSpareThreads="5" enableLookups="true" disableUploadTimeout="true" acceptCount="100" maxThreads="200" scheme="https" secure="true" SSLEnabled="true" keystoreFile="<FMEServerDir>Utilities	omcatmyfile.pfx" keystorePass="PKCS12" keystorePass="<your_password>" clientAuth="false" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" sslImplementationName="org.apache.tomcat.util.net.jsse.JSSEImplementation" ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA"URIEncoding="UTF8" />

    That's enough, continue the tutorial admin and restart FME SERVER and it's done

    Bye Eric

    <strong>This post is closed to further activity.</strong><br /> It may be a question with a best answer, an implemented idea, or just a post needing no comment.<br /> If you have a follow-up or related question, please <a href="https://community.safe.com/topic/new">post a new question or idea</a>.<br /> If there is a genuine update to be made, please contact us and request that the post is reopened.

    1 reply

    Forum|alt.badge.img+2
    Hi @ric I noticed on line 6, should this be keystoreType="PKCS12" rather than keystorePass="PKCS12"? I don't know whether you're able to edit your post.

    Cookie policy

    We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

     
    Cookie settings