Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I secure tomcat's application manager with ssl ? I already have the certificates for the site.


share|improve this question
up vote 1 down vote accepted

Define the admin app inside a SSL connector.

share|improve this answer

You could try adding user-data-constraints in tomcat manager's web.xml. That might do the trick:


Maybe insert them before the /security-contraint closing tag in the HTML Manager commands section of that web.xml:

share|improve this answer

you can use nginx or apache in front of your tomcat to control access easily.

share|improve this answer
I tried with apache and mod_proxy, but when it redirects to the manager app it goes plain-text. – xain Feb 27 '11 at 14:58
check this:… – aligot May 3 '11 at 12:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.