---
title: Web Server Configuratio
slug: singleconnect-reference-guide-3-1-0/web-server-configuratio
description: Learn how to modify the configuration files for Single Connect server with this comprehensive guide. Follow the step-by-step instructions to open an SSH connection, edit server.xml and web.xml files, make changes to keystore parameters, uncomment security
docTags: 
createdAt: 2022-08-01T11:40:58.000Z
---

1. Open an SSH connection to Single Connect with the root account.
2. Open and edit lines 87-111 of the file **/u01/netright-tomcat/conf/server.xml**.
3. Remove the comment tags at the top an bottom. 
4. Change the **keystoreFile**,** keystorepass** and **keyAlias** parameters.  

:::Iframe{code=" <!--&#xD;&#xA;	<Connector port=&#x22;443&#x22; maxThreads=&#x22;200&#x22; scheme=&#x22;https&#x22; secure=&#x22;true&#x22; SSLEnabled=&#x22;true&#x22; &#xD;&#xA;		keystoreFile=&#x22;/u01/netright-tomcat/conf/cert/sctest.jks&#x22; keystorePass=&#x22;pass123&#x22; &#xD;&#xA;		sslEnabledProtocols=&#x22;TLSv1.1,TLSv1.2&#x22;&#xD;&#xA;		server=&#x22;SingleConnect Server&#x22;&#xD;&#xA;		ciphers=&#x22;TLS_DHE_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_RSA_WITH_AES_128_GCM_SHA256&#x22;&#xD;&#xA;		clientAuth=&#x22;false&#x22; sslProtocol=&#x22;TLSv1.2&#x22; keyAlias=&#x22;sctest&#x22;/>&#xD;&#xA; -->&#xD;&#xA;" iframeHeight="0"}

:::

1. Open and edit lines 4683-4694 of the fil&#x65;**&#x20;/u01/netright-tomcat/conf/web.xml**. Remove the comment tags at the top an bottom.

```html
<!--
<security-constraint>
	<web-resource-collection>
		<web-resource-name>Protected Context</web-resource-name>
		<url-pattern>/*</url-pattern>
	</web-resource-collection>

	<user-data-constraint>
		<transport-guarantee>CONFIDENTIAL</transport-guarantee>
	</user-data-constraint>
</security-constraint>
-->
```

- Open and edit the file,**&#x20;/u01/netright-tomcat/netright/netright.properties**. Change line 18 and add a new property to line 19, as shown below.

:::Iframe{code="18 : netright.baseurl=http://127.0.0.1:80&#xD;&#xA;&#xD;&#xA;change to:as&#xD;&#xA;&#xD;&#xA;18 : netright.baseurl=https://127.0.0.1:443&#xD;&#xA;19 : netright.cookie.secure=true&#xD;&#xA;" iframeHeight="0"}

:::

- Restart the Web Portal service with the command:
  systemctl restart netright-tomcat