disabling Tomcat shutdown port in Autosys

Products

• Autosys Workload Automation

Issue/Introduction

Apache recommends to disable the Tomcat shutdown port for security hardening. This documents how it can be done for AutoSys components that use Tomcat (WebUI, REST/SOAP Web Services)

 

Environment

12.x

Resolution

1) Identify appropriate server.xml

a) For Autosys webserver it is : cd $AUTOSUER/webserver/conf

 Note: For Windows, it is %AUTOUSER%

 

b) For WCC it is  cd $CA_WCC_INSTALL_LOCATION/tomcat/conf

Note: For Windows, it is %CA_WC_INSTALL_LOCATION%

 

2) Backup existing server.xml
cp -p server.xml server.xml_original

Note: for Windows, copy paste the file via File Explorer

 

3) Edit the original file
vi server.xml

Note: For Windows, edit via notepad

 

4) Search for the following line:
<Server port="8005" shutdown="">

port 8005 is the default port number that has been chosen at installation time. It might be different in each environment or installation 

 

5) Change port "8005" to "-1"

 

6) Save the file

 

7) Restart Autosys Web Server / WCC for the change to be effective