Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
vendors:cisco:uc:ucce:tomcat_shutdown_port [2020/03/04 09:45] – gerardorourkevendors:cisco:uc:ucce:tomcat_shutdown_port [2020/03/04 12:13] (current) – gerardorourke
Line 17: Line 17:
   *If the shutdown port is not disabled, a strong password should be configured for shutdown.    *If the shutdown port is not disabled, a strong password should be configured for shutdown. 
  
-So let's try that - disable the tomcat shutdown port as recommended by the tomcat security guide.+It should be noted that Tomcat only listens to this port on the loopback address - 127.0.0.1:8005, so this port is only accessible from the local server. But let's try that!, i.e. disable the tomcat shutdown port as recommended by the tomcat security guide!
  
-However if you set disable port in the config file: C:\icm\tomcat\conf\server.xml, as per below \\+However if you do disable port in the config file: C:\icm\tomcat\conf\server.xml, as per below \\
 <Code><Server port="-1" shutdown="SHUTDOWN"></code>\\ <Code><Server port="-1" shutdown="SHUTDOWN"></code>\\
  
-You will get the following error when viewing the SETUP web page:\\+You will get then get the following error when viewing the SETUP web page:\\
 {{:vendors:cisco:uc:ucce:setup-iis-error.png?800|}} {{:vendors:cisco:uc:ucce:setup-iis-error.png?800|}}
 +And the error in the websetup logs is as follows:
 +<code>%ICM-ERROR-SSLIISPrechecksInterceptor.intercept: Internet Information Server (IIS) was recently installed.  The machine must be restarted if it hasn't been already and the SSL Encryption Utility under Start > All Programs > Cisco Unified CCE Tools > SSL Encryption Utility must be run by selecting "ALL INSTANCES".</code>
  
 You will notice that when if you run the **SSL Encryption Utility** as recommended above - you will see the following error:\\ You will notice that when if you run the **SSL Encryption Utility** as recommended above - you will see the following error:\\
Line 34: Line 36:
 <wrap hi>If you make the SAME change and set the shutdown port set to "-1" on this comparison config file - the setup webpage will function successfully. </wrap> <wrap hi>If you make the SAME change and set the shutdown port set to "-1" on this comparison config file - the setup webpage will function successfully. </wrap>
  
 +Note: This change should also be done to the CVP Servers.\\
 +They only require their CallServer Tomcat config file to be changed (set to "-1").\\
 +The CVP Call Server Tomcat config file is located: C:\Cisco\CVP\CallServer\Tomcat\conf\server.xml\\
  • vendors/cisco/uc/ucce/tomcat_shutdown_port.1583315152.txt.gz
  • Last modified: 2020/03/04 09:45
  • by gerardorourke