10.1.4. Configuring Keystore and Truststore on the EnginFrame Server

Engineering Knowledge Manager

Installation Guide | Chapter 10: Installing and Configuring EnginFrame | 10.1. Installing EnginFrame |

10.1.3. Creating Certificates |  | 10.1.5. Configuring Keystore and Truststore on the Client (EKM Server/Nodes)
Prev |  | Next

### 10.1.4. Configuring Keystore and Truststore on the EnginFrame Server

1. Copy the enginframe.domainname.com.ef.keystore and enginframe.domainname.com.ef.truststore files to ${EF_CONF_ROOT}/tomcat/conf and check that their owner is set to the user designated as TOMCAT_USER. File permissions of those files must be 600.

   Note: At the time that these instructions were written, there was an issue reported about this step. To work around the issue, simply copy the enginframe.domainname.com.ef.keystore and enginframe.domainname.com.ef.truststore to the ${EF_CONF_ROOT}/tomcat folder as well.

2. Add the following to the ${EF_CONF_ROOT}/tomcat/conf/server.xml file:

       <Connector
           clientAuth="true"
           port="8443"
           minSpareThreads="5"
           protocol="HTTP/1.1"
           enableLookups="true"
           disableUploadTimeout="true"
           acceptCount="100"
           maxThreads="200"
           scheme="https"
           secure="true"
           SSLEnabled="true"
           keystoreFile="enginframe.domainname.com.ef.keystore"
           keystoreType="JKS"
           keystorePass="ekmansys"
           keyAlias="enginframe.domainname.com"
           truststoreFile="enginframe.domainname.com.ef.truststore"
           truststoreType="JKS"
           truststorePass="ekmansys"
           sslProtocol="TLS"/>

3. For security purposes we recommend that you close the HTTP Connector to accept connections only from localhost, by adding the attribute address. In this way only secured HTTPS connections will be possible from external sources.

       <Connector
           address="127.0.0.1"
           port="8180"
           maxHttpHeaderSize="8192"
           maxThreads="150"
           minSpareThreads="25"
           enableLookups="false"
           redirectPort="8443"
           acceptCount="100"
           connectionTimeout="20000"
           disableUploadTimeout="true"
           URIEncoding="utf-8"/>

   Note: If the Tomcat port was changed from 8080 to 8180 during the EnginFrame installation, specify port="8180" instead.

Contains proprietary and confidential information of ANSYS, Inc. and its subsidiaries and affiliates.

Prev | Up / Contents | Next

Release 18.2 - © ANSYS, Inc. All rights reserved.