The installation directory for Tomcat is represented as <TOMCAT_HOME>.
-
Download and install Tomcat following the instructions from http://tomcat.apache.org.
See the Supported platforms page for the supported versions.
-
Create an additional classpath to Tomcat, which will be shared among all web
applications.
-
Create the directories required for an Alfresco Content Services installation under
<TOMCAT_HOME>:
- Create the shared/classes directory.
- Create the shared/lib directory.
- Open the <TOMCAT_HOME>/conf/catalina.properties file.
-
Change the value of the shared.loader= property to the
following:
shared.loader=${catalina.base}/shared/classes,${catalina.base}/shared/lib/*.jar
-
Create the directories required for an Alfresco Content Services installation under
<TOMCAT_HOME>:
- Copy the JDBC drivers for the database you are using to the lib directory.
-
(Optional) If you plan to use Kerberos authentication.
By default, Tomcat uses an 8 KB header buffer size, which might not be large enough for the Kerberos authentication protocol. We need to increase this buffer size. To make this change, edit the <TOMCAT_HOME>/conf/server.xml file and change the <Connector> defined for HTTP traffic as follows:
<Connector port="8080" protocol="HTTP/1.1" URIEncoding="UTF-8" connectionTimeout="20000" maxHttpHeaderSize="32768" redirectPort="8443" />
-
(Optional) Configure additional connectors.
You might want to connect from your front end load balancer with a different protocol, like AJP, or you might want to terminate TLS directly in Tomcat.
In these cases, you need to add additional connectors to Tomcat. Follow the official Tomcat documentation for these use cases, and make sure to increase the maxHttpHeaderSize on these additional Connectors as well (in case you plan to use Kerberos).
-
(Optional) Enable Simple JAR modules.
The Alfresco Content Services repository allows you to provide extensions outside of the web application, known as simple JAR modules. If you want to enable this mechanism, follow these steps:
-
Create the following directories under <TOMCAT_HOME>:
- modules/platform
- modules/share
- Copy the files alfresco.xml and share.xml from the distribution zip /web-server/conf/Catalina/localhost to <TOMCAT_HOME>/conf/Catalina/localhost (or hostname).
-
Create the following directories under <TOMCAT_HOME>:
-
Configure mutual TLS for Solr communication.
The communication with Solr is encrypted and authenticated via mutual TLS. For this connection, you need an additional Connector.
Note: This Connector is not used by end users. Its sole purpose is to handle the communication with Solr.- Open the <TOMCAT_HOME>/conf/server.xml file.
-
Add the following Connector:
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true" maxThreads="150" scheme="https" keystoreFile="xxxxx" keystorePass="password" keystoreType="JCEKS" secure="true" connectionTimeout="240000" truststoreFile="xxxxx" truststorePass="password" truststoreType="JCEKS" clientAuth="want" sslProtocol="TLS" />
Note: The keystore and truststore file locations in the above example will be created later, when you install and configure Alfresco Search Services.Note: If you're using a different keystore or truststore type other than the default, JCEKS, you must change the value in the properties file.
- Save the server.xml file.