Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Noob questions im guessing but im trying to find where to change "ServerTokens Full" to "ServerTokens Prod" but I cannot seem to find it. im in the apache/apache2.conf. Along with this I want to turn off ServerSignature any help with an explanation would be great.

I am just getting into this web servers and programming in general and am finding it pretty awesome.

share|improve this question
One sure way to stop being a noob is to read documentation – Iain Jun 16 '12 at 17:28

The default value for servertokens is Full this probably why you can't find it anywhere to change it. As you can see from the linked servertokens documentation the context is server config. The main Apache server configuration on ubuntu is found in /etc/apache2/apache2.conf so adding

ServerTokens Prod

to it and restarting Apache should do the trick.

share|improve this answer

According to regarding ServerTokens:

Setting ServerTokens to less than minimal is not recommended because it makes it more difficult to debug interoperational problems. Also note that disabling the Server: header does nothing at all to make your server more secure; the idea of "security through obscurity" is a myth and leads to a false sense of safety.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.