The existing certificate keystore file used for SSL communication on the internal Jamf Pro web application server can also be used with the external DMZ Jamf Pro web application.
- Open the server.xml file on the internal server. The location of the server.xml file depends on the platform and how you installed Jamf Pro. If you used the Jamf Pro Installer to install Jamf Pro, the file is located at:
-
Linux: /var/local/jss/tomcat/conf/server.xml
-
Windows: C:\Program Files\JSS\Tomcat\conf\server.xml
-
Mac: /Library/JSS/Tomcat/conf/server.xml
-
- Find the location of the keystore file by locating the following line:
keystoreFile="/path/to/keystore-file" - Copy or make note of the keystore password from the server.xml file on the internal server. It should look similar to the following:
keystorePass="changeit" - Copy the certificate keystore file from the internal server to the external server.
- Modify the server.xml file on the external server to point at the keystore file by locating the Connector Port element and adding the following lines:
keystoreFile="/path/to/keystore-file" keystorePass="changeit"