Method 1: Enabling HSTS When Upgrading Using the Installer

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Perform these steps if you are upgrading to Jamf Pro 10.44.0 or later using the installer.

To enable HSTS for this scenario, you must edit one element in the Apache Tomcat web.xml file before running the installer.
Note:
If you do not edit the web.xml file before running the installer, you can still enable HSTS by doing one of the following:
Requirements

  • Jamf Pro 10.4.0–10.43.x

  • Installer for Jamf Pro 10.44.0 or later

  1. Stop Tomcat. For instructions, see the Starting and Stopping Tomcat article.
  2. Locate and open the web.xml file in a text editor:
    • Linux: /usr/local/jss/tomcat/conf/web.xml
      Note:

      You may need to use sudo -s to access the /conf directory.

    • Windows: C:\Program Files\JSS\Tomcat\conf\web.xml

  3. Find the httpHeaderSecurity <filter> element and uncomment it.
    Before:
    <!--
    <filter>
        <filter-name>httpHeaderSecurity</filter-name>
        <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
        <async-supported>true</async-supported>
    </filter>
-->
    After:
    <filter>
    <filter-name>httpHeaderSecurity</filter-name>
    <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
    <async-supported>true</async-supported>
</filter>
  4. You can now upgrade Jamf Pro. For instructions, see the upgrading information in the installation and configuration guide for your version of Jamf Pro:
    Note:

    If you are running the Jamf Pro Installer for Windows a second time to enable HSTS, choose the Repair option when prompted.