Differences

This shows you the differences between two versions of the page.

--- vendors:cisco:uc:ucce:tomcat_shutdown_port [2020/03/04 09:46] – gerardorourke
+++ vendors:cisco:uc:ucce:tomcat_shutdown_port [2020/03/04 12:13] (current) – gerardorourke
@@ Line 17: / Line 17: @@
   *If the shutdown port is not disabled, a strong password should be configured for shutdown.
-So let's try that!, i.e. disable the tomcat shutdown port as recommended by the tomcat security guide.
+It should be noted that Tomcat only listens to this port on the loopback address - 127.0.0.1:8005, so this port is only accessible from the local server. But let's try that!, i.e. disable the tomcat shutdown port as recommended by the tomcat security guide!
 However if you do disable port in the config file: C:\icm\tomcat\conf\server.xml, as per below \\
@@ Line 24: / Line 24: @@
 You will get then get the following error when viewing the SETUP web page:\\
 {{:vendors:cisco:uc:ucce:setup-iis-error.png?800|}}
+And the error in the websetup logs is as follows:
+<code>%ICM-ERROR-SSLIISPrechecksInterceptor.intercept: Internet Information Server (IIS) was recently installed.  The machine must be restarted if it hasn't been already and the SSL Encryption Utility under Start > All Programs > Cisco Unified CCE Tools > SSL Encryption Utility must be run by selecting "ALL INSTANCES".</code>
 You will notice that when if you run the **SSL Encryption Utility** as recommended above - you will see the following error:\\
@@ Line 34: / Line 36: @@
 <wrap hi>If you make the SAME change and set the shutdown port set to "-1" on this comparison config file - the setup webpage will function successfully. </wrap>
+Note: This change should also be done to the CVP Servers.\\
+They only require their CallServer Tomcat config file to be changed (set to "-1").\\
+The CVP Call Server Tomcat config file is located: C:\Cisco\CVP\CallServer\Tomcat\conf\server.xml\\