NetWorker: How to enable HSTS configuration in NetWorker Apache Tomcat server

Oversigt: This article provides instructions for enabling HTTP Strict Transport Security (HSTS) on NetWorker web-based applications.

Denne artikel gælder for Denne artikel gælder ikke for Denne artikel er ikke knyttet til et bestemt produkt. Det er ikke alle produktversioner, der er identificeret i denne artikel.
Udforsk andre ressourcer

Instruktioner

By default, all NetWorker web applications use HTTPS for all the communication; however, HSTS is not enforced. See RFC 6797 This hyperlink is taking you to a website outside of Dell Technologies.

NOTE: HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate using HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.

To enable HSTS in Tomcat, follow these steps:
 

  1. Open the NetWorker server web.xml file in a text editor.
  • Linux: /opt/nsr/authc-server/tomcat/conf/web.xml
  • Windows (Default): C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\web.xml
  1. Uncomment the httpHeaderSecurity filter definition and the <filter-mapping> section, and then add the hstsMaxAgeSeconds parameter, as shown below.
<filter>
<filter-name>httpHeaderSecurity</filter-name>
<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
<init-param>
<param-name>hstsMaxAgeSeconds</param-name>
<param-value>31536000</param-value>
</init-param>
<async-supported>true</async-supported>
</filter>

<filter-mapping>
<filter-name>httpHeaderSecurity</filter-name>
<url-pattern>/*</url-pattern>
<dispatcher>REQUEST</dispatcher>
</filter-mapping>
  1. Save the file.
  2. Restart the NW server from an elevated prompt:
  • Linux: systemctl restart networker
  • Windows (Command Prompt): net stop nsrd && net start nsrd
  • Windows (PowerShell): net stop nsrd ; net start nsrd

Berørte produkter

NetWorker

Produkter

NetWorker Family
Artikelegenskaber
Artikelnummer: 000456395
Artikeltype: How To
Senest ændret: 23 apr. 2026
Version:  1
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.