---
title: Web Server Configuratio
slug: singleconnect-reference-guide-3-3-0/web-server-configuratio
description: Learn how to modify the configuration files of the Single Connect server in this comprehensive document. Find instructions on changing keystoreFile, keystorepass, and keyAlias parameters in server.xml, removing comment tags in web.xml, editing netright.pr
docTags: 
createdAt: 2022-08-01T11:40:58.000Z
---

1. Open an SSH connection to Single Connect with the root account.
2. Open and edit lines 87-111 of the file **/u01/netright-tomcat/conf/server.xml**.
3. Remove the comment tags at the top and bottom. 
4. Change the **keystoreFile**,** keystorepass** and **keyAlias** parameters.  

:::Iframe{code=" <!--&#xD;&#xA;	<Connector port=&#x22;443&#x22; maxThreads=&#x22;200&#x22; scheme=&#x22;https&#x22; secure=&#x22;true&#x22; SSLEnabled=&#x22;true&#x22; &#xD;&#xA;		keystoreFile=&#x22;/u01/netright-tomcat/conf/cert/sctest.jks&#x22; keystorePass=&#x22;pass123&#x22; &#xD;&#xA;		sslEnabledProtocols=&#x22;TLSv1.1,TLSv1.2&#x22;&#xD;&#xA;		server=&#x22;SingleConnect Server&#x22;&#xD;&#xA;		ciphers=&#x22;TLS_DHE_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,&#xD;&#xA;			TLS_RSA_WITH_AES_128_CBC_SHA,&#xD;&#xA;			TLS_RSA_WITH_AES_128_CBC_SHA256,&#xD;&#xA;			TLS_RSA_WITH_AES_128_GCM_SHA256&#x22;&#xD;&#xA;		clientAuth=&#x22;false&#x22; sslProtocol=&#x22;TLSv1.2&#x22; keyAlias=&#x22;sctest&#x22;/>&#xD;&#xA; -->&#xD;&#xA;" iframeHeight="0"}

:::

1. Open and edit lines 4683-4694 of the fil&#x65;**&#x20;/u01/netright-tomcat/conf/web.xml**. Remove the comment tags at the top an bottom.

```html
<!--
<security-constraint>
	<web-resource-collection>
		<web-resource-name>Protected Context</web-resource-name>
		<url-pattern>/*</url-pattern>
	</web-resource-collection>

	<user-data-constraint>
		<transport-guarantee>CONFIDENTIAL</transport-guarantee>
	</user-data-constraint>
</security-constraint>
-->
```

- Open and edit the file,**&#x20;/u01/netright-tomcat/netright/netright.properties**. Change line 18 and add a new property to line 19, as shown below.

:::Iframe{code="18 : netright.baseurl=http://127.0.0.1:80&#xD;&#xA;&#xD;&#xA;change to:as&#xD;&#xA;&#xD;&#xA;18 : netright.baseurl=https://127.0.0.1:443&#xD;&#xA;19 : netright.cookie.secure=true&#xD;&#xA;" iframeHeight="0"}

:::

- Restart the Web Portal service with the command:
  systemctl restart netright-tomcat