How to Suppress the Apache/mod_jk/openssl Version Information in Access Gateway Server Header

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

We do not want to display the web server version information in the Server header returned by Access Gateway (Secure Proxy Server).  How can we accomplish this?

Environment

Release : ALL

Component : SITEMINDER - ACCESS GATEWAY

Resolution

Add the following two lines to the /secure-proxy/httpd/conf/extra/httpd-mpm.conf file:

ServerTokens Prod
ServerSignature Off

Restart Access Gateway after making this change.  The version information will be gone and the Server header will now only report 'Apache'.