---
title: Integrate with Apache Tomcat and IBM WebSphere
slug: kronpam-how-to-guides/integrate-with-apache-tomcat-and-ibm-websphere
docTags: 
createdAt: 2025-10-18T13:18:33.475Z
---

This document explains how to integrate **Kron PAM Password Vault** with **Apache Tomcat** and **IBM WebSphere Application Servers** using the **Kron PAM JDBC Proxy Driver**.

By implementing this integration, database credentials used by applications are dynamically retrieved from Kron PAM at runtime instead of being stored in configuration files. This ensures secure, automated, and policy-compliant credential management for all database connections initiated by application servers.

### Secure Database Credential Management

Application servers typically require stored credentials to connect to databases. Keeping these credentials in plain text or even in encrypted configuration files creates a security risk and administrative overhead.

With this integration:

- Database passwords are centrally managed and periodically rotated within the **Kron PAM Password Vault**. 
- The **Kron PAM Proxy Driver** transparently retrieves the current password for each database account at runtime. 
- The connection is established dynamically without any static credentials stored on the server. 

This design enables compliance with enterprise security policies while maintaining continuous application availability.

### Supported Platforms

The Kron PAM Proxy Driver supports integration with:

- **Apache Tomcat** (via context.xml resource definitions) 
- **IBM WebSphere Application Server** (via server.xml configuration) 

Supported databases include:

- PostgreSQL 
- MySQL 
- Oracle Database 
- Microsoft SQL Server

### Integration Objective

This guide provides step-by-step instructions for configuring the Kron PAM Proxy Driver on both Tomcat and WebSphere environments. After configuration:

- All database authentication requests are routed through Kron PAM. 
- Credentials are retrieved automatically and securely at runtime. 
- Password rotation and synchronization are fully automated through the PAM Vault.