ESET Online Help

Search English
Select the category
Select the topic

Upgrade Apache Tomcat and Java (Linux)

Apache Tomcat is a mandatory component required to run the ESET PROTECT Web Console.

Before upgrading

1.Execute the following command to see the installed version of Apache Tomcat (in some cases, the folder name is tomcat7 or tomcat8):

cd /usr/share/tomcat/bin && ./

2.If a later version is available:

a.Ensure that the later version is supported.

b.Back up the Tomcat configuration file /etc/tomcat7/server.xml.

Upgrade procedure

1.Run the following command to stop the Apache Tomcat service (in some cases, the service name is tomcat7):

sudo systemctl stop tomcat

2.Upgrade Apache Tomcat and Java.


Example package names below may differ from your Linux distribution repository packages. The default repository of your Linux distribution may not contain the latest supported version of Apache Tomcat and Java.

Linux distribution

Terminal commands

Debian and Ubuntu distributions

sudo apt-get update
sudo apt-get install openjdk-17-jdk tomcat9

CentOS and Red Hat distributions

yum update
yum install java-17-openjdk tomcat

SUSE Linux

zypper refresh
sudo zypper install java-17-openjdk tomcat9

3.Replace the /etc/tomcat9/server.xml file with the server.xml file from your backup.

4.Open the server.xml file and ensure the keystoreFile path is correct.

5.Ensure the HTTPS connection for Apache Tomcat is configured correctly.

See the additional Web Console configuration for enterprise solutions or low-performance systems.

6.If you have upgraded Java, follow the steps below to configure Apache Tomcat to use the latest Java package installed on your system:

a.Navigate to the Apache Tomcat configuration folder:

cd /usr/share/tomcat/conf/

b.Open the tomcat.conf file in a text editor:

nano tomcat.conf

c.Update the path to the latest installed Java package in the JAVA_HOME variable (the path differs based on the Java package installed on your system):


d.Save and close the file: Press CTRL+X and then press Y and ENTER.

e.Restart the tomcat service:

sudo systemctl restart tomcat

f.Run the command below to verify the Java package used by Apache Tomcat:

sudo systemctl status tomcat


After upgrading Apache Tomcat to a later major version (for example Apache Tomcat version 7.x to 9.x):

1.Deploy ESET PROTECT Web Console again (see ESET PROTECT Web Console installation - Linux)

2.Reuse %TOMCAT_HOME%/webapps/era/WEB-INF/classes/sk/eset/era/g2webconsole/server/modules/config/ to preserve any custom settings in ESET PROTECT Web Console.

The Web Console and Apache Tomcat upgrade clears the Offline help files. If you used Offline help with ESMC or an earlier ESET PROTECT version, re-create it for ESET PROTECT 10.1 after upgrading to ensure that you have the latest Offline help matching your ESET PROTECT version.