Skip to main content
Archived

FME Server configuration SSL with PFX file

  • August 27, 2018
  • 1 reply
  • 32 views

Hi, If you want to configure HTTPS for your's FME Server with a PFX file.

Go to Configuration page and at the Tomcat configuration read and open the server.xml.

So you must add this parameter --> keystoreType="PKCS12" and modify this another parameters keystoreFile="<FMEServerDir>Utilities omcatyourfile.pfx" keystorePass="<your_password>"

Like This :

    <Connector protocol="org.apache.coyote.http11.Http11NioProtocol"port="443" minSpareThreads="5" enableLookups="true" disableUploadTimeout="true" acceptCount="100" maxThreads="200" scheme="https" secure="true" SSLEnabled="true" keystoreFile="<FMEServerDir>Utilities	omcatmyfile.pfx" keystorePass="PKCS12" keystorePass="<your_password>" clientAuth="false" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" sslImplementationName="org.apache.tomcat.util.net.jsse.JSSEImplementation" ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA"URIEncoding="UTF8" />

    That's enough, continue the tutorial admin and restart FME SERVER and it's done

    Bye Eric

    This post is closed to further activity.
    It may be an old question, an answered question, an implemented idea, or a notification-only post.
    Please check post dates before relying on any information in a question or answer.
    For follow-up or related questions, please post a new question or idea.
    If there is a genuine update to be made, please contact us and request that the post is reopened.

    1 reply

    Forum|alt.badge.img+2
    Hi @ric I noticed on line 6, should this be keystoreType="PKCS12" rather than keystorePass="PKCS12"? I don't know whether you're able to edit your post.