Overview

This article will outline how to force FileCatalyst Central to redirect all traffic to use an HTTPS connection.

Environment

FileCatalyst Central v3.6 and later.

Resolution

To force a redirect of all traffic to HTTPS automatically, we need to edit the web.xml file. 

1. Shutdown the FileCatalyst Central Service.
2. Open the web.xml file in a text editor. It is located in /<path to FileCatalyst Central>/FileCatalyst Central/www/Web Console/WEB-INF/. 
   A sample path in the Windows Environment is, C:\FileCatalyst Central\www\Web Console\WEB-INF\.
   
   
3. Edit the web.xml and add the following lines above the last </web-app> (closing element):
   
     <!-- Require HTTPS for everything except /img (favicon) and /css. -->
     <security-constraint>
         <web-resource-collection>
             <web-resource-name>HTTPSOnly</web-resource-name>
             <url-pattern>/*</url-pattern>
         </web-resource-collection>
         <user-data-constraint>
             <transport-guarantee>CONFIDENTIAL</transport-guarantee>
         </user-data-constraint>
     </security-constraint>
     <security-constraint>
         <web-resource-collection>
             <web-resource-name>HTTPSOrHTTP</web-resource-name>
             <url-pattern>*.ico</url-pattern>
             <url-pattern>/img/*</url-pattern>
             <url-pattern>/css/*</url-pattern>
         </web-resource-collection>
         <user-data-constraint>
             <transport-guarantee>NONE</transport-guarantee>
         </user-data-constraint>
     </security-constraint>
   
   
4. Save and close the web.xml file and restart the FileCatalyst Central Service.