Upgrade Apache Tomcat manually (Windows)

Apache Tomcat is a mandatory component required to run the ESET PROTECT Web Console. Upgrade Apache Tomcat manually if you performed the existing Apache Tomcat installation manually or you do not have the latest ESET PROTECT All-in-one installer.

Before upgrading

•Apache Tomcat requires 64-bit Java/OpenJDK. If your system has multiple Java versions installed, uninstall earlier Java versions and keep only the latest supported Java version.

•Check to see which version of Apache Tomcat is currently available.

a.Navigate to the Apache Tomcat installation folder:
C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\

b.Open the RELEASE-NOTES file in a text editor and check the version number (for example, 9.0.34).

c.If a more recent supported version is available, perform an upgrade.

Upgrade procedure

1.Stop the Apache Tomcat service: Navigate to Start > Services > right-click the Apache Tomcat service and select Stop.

Close Tomcat7w.exe if it is running in your Windows notification area.

2.Back up the following files:

C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\.keystore
C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\conf\server.xml
C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\webapps\era\WEB-INF\classes\sk\eset\era\g2webconsole\server\modules\config\EraWebServerConfig.properties

If you are using a custom SSL certificate store in the Tomcat folder, also back up that certificate.

3.Uninstall the current version of Apache Tomcat.

4.Delete the following folder if it is still present on your system:

C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\

5.Download the latest supported version of the Apache Tomcat installer file (32-bit/64-bit Windows Service Installer) apache-tomcat-[version].exe from https://tomcat.apache.org.

6.Install the later version of Apache Tomcat that you downloaded:

•If you have more Java versions installed, select the path to the latest Java during the installation.

•When the installation completes, deselect the check box next to Run Apache Tomcat.

7.Restore .keystore, server.xml, and custom certificates to their original location.

8.Open the server.xml file and ensure the keystoreFile path is correct (update the path if you upgraded to a later major version of Apache Tomcat):

keystoreFile="C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\.keystore"

9.Ensure that the HTTPS connection for Apache Tomcat for ESET PROTECT Web Console is configured correctly.

10. Deploy the ESET PROTECT Web Console (Web Console installation - Windows).

11. Restore EraWebServerConfig.properties to its original location.

12. Run Apache Tomcat and set a correct Java VM:

a.Navigate to the folder C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\bin and run Tomcat9w.exe.

b.In the General tab, set Startup Type to Automatic and press Start.

c.Click the Java tab, deselect Use default, and ensure Java Virtual Machine includes the path to jvm.dll file (see illustrated Knowledgebase instructions), and then click OK.

13. Connect to the ESET PROTECT Web Console and verify that the Web Console loads correctly.

Troubleshooting

•If you are unsuccessful in setting up an HTTPS connection for Apache Tomcat, you can skip this step and use an HTTP connection temporarily.

•If the upgrade of Apache Tomcat fails, install your original version and apply the configuration from step 2.

•The Web Console and Apache Tomcat upgrade clears the Offline help files. If you used Offline help with an earlier ESET PROTECT On-Prem version, re-create it for ESET PROTECT On-Prem 11.1 after upgrading to ensure that you have the latest Offline help matching your ESET PROTECT On-Prem version.