Update the server.xml File for the SSL Configuration

1. Open the server.xml file.

# vi /opt/tomcat/conf/server.xml 

2. Add the following entries to the connector section for SSL.

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"                
            maxThreads="150" SSLEnabled="true"> 
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" /> 
        <SSLHostConfig> 
            <Certificate certificateKeystoreFile=""                          
                  certificateKeystoreType="PKCS11" 
                  certificateKeystoreProvider="SunPKCS11-CryptoServer"  
                  certificateKeyAlias=" tomcatsslkey "  
                  certificateKeystorePassword="123456"                          
                  type="RSA" /> 
        </SSLHostConfig> 
    </Connector> 

Here:

• certificateKeystoreFile is blank as the HSM is being used

• certificateKeystoreType is pkcs11 as the keystore is being used

• certificateKeystoreProvider is SunPKCS11-CryptoServer

• certificateKeyAlias is the name of the key generated using the keytool command

• certificateKeystorePassword is the password of the HSM keystore

• type is the key algorithm to use (RSA/EC)

3. Reload the daemon using:

# systemctl daemon-reload 

4. Restart the Tomcat service using:

# systemctl restart tomcat 

5. Confirm that the Tomcat status is running using:

# systemctl status tomcat 

6. The below output shows it is running:

Tomcat Service Status Output

7. Now access the page over https using https://<ip>:8443.

Tomcat Service Status Output - Browser