Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

configuration parameters are located in three places:

  • config.properties - created by the System Administrator to override parameters in a container web.xml file. This is most often used when the container is not tomcat. See below for details.
  • <frevvo-home>\tomcat\conf\Catalina\localhost\frevvo.xml - recommended file to override context-
    Section
    Column
    Section
    Column

    configuration parameters are located in three places:

    1. config.properties - created by the System Administrator to override parameters in a container web.xml file. This is most often used when the container is not tomcat. See below for details.
    2. <frevvo-home>\tomcat\conf\Catalina\localhost\frevvo.xml - recommended file to override context-parameters in the web.xml file when using the tomcat container.
    3. WEB-INF\web.xml - this configuration file is included in the <frevvo-home>\tomcat\webapps\frevvo.war zipfile. Modifications to this file require unzipping/rezipping the frevvo.war file after the modifications have been made. See below for the instructions. OEM partners can use this file to customize the product in many ways. See Installation Customizations for more information.

    The parameters that are most commonly modified and discussed in the sections below are in frevvo.xml. The less commonly modified parameters are in web.xml. Any parameter in web.xml can be duplicated in frevvo.xml and the value in frevvo.xml takes precedence over the value in web.xml. If you plan to override the web.xml context parameter values and you are using the frevvo Tomcat bundle, we suggest doing so in frevvo.xml. This keeps all your modified parameters in one place and makes it easy to upgrade frevvo to newer releases.

    A config.properties file in a deployment using tomcat seems redundant since it basically does the same thing as the frevvo.xml file. If it does exist , the configuration parameters in the config.properties file will override the frevvo.xml and web.xml files.

    Modifying the frevvo.xml file.

    Follow these steps to modify context parameters in the frevvo.xml file. You can also set up your database in this file as well. If you are using tomcat, making your configuration changes here, will make it easier when you upgrade to :

    1. Stop if it is running.
    2. Navigate to <frevvo-home>\tomcat\conf\catalina\localhost\frevvo.xml.
    3. Open the file with a text editor.
    4. The installation tasks listed below will reference the frevvo.xml and web.xml files when appropriate. You can configure anything in frevvo.xml that you can configure in web.xml. When you add parameters to the file, use the same syntax as the ones already there. Here is an example of a parameter to control the Maximum Size of Attachments that users can upload.
    Code Block
    <Parameter name="frevvo.attachment.maxsize" value="10485760" override="false"/> 

          5. Save the file after all your changes are made. Restart .

    Modifying the web.xml file

    The web.xml file is included in the <frevvo-home>\tomcat\webapps\frevvo.war. The frevvo.war must be unzipped/rezipped after modifications have been made as outlined in the steps below:

    1. Stop  if it is running. 
    2. Unpack the frevvo.war file to a temporary location of your choice: e.g. c:\tmp\frevvo-war. Change the file extension from .war to .zip if necessary.
    3. Edit c:\tmp\frevvo-war\WEB-INF\web.xml.
    4. Make the desired configuration changes - see appropriate sections of this page for information on specific parameters. Save the changes to the web.xml file. 
    5. Rezip all the files in the c:\tmp\frevvo-war directory, even the ones you did not edit — if you change directories or zip them differently, Live Forms may not load correctly:

      This is the correct structure for the frevvo.war zipfile.

    6. Make sure you create the zipfile with the directory structure as shown in the image above. It is an easy mistake to include the containing directory in the zipfile. If you do this, Live Forms may not load correctly. Zip will often give your zipfile a .zip extension. Make sure you change this to a .war extension. 

    7. Copy the updated frevvo.war file to <frevvo-home>tomcat\webapps.
    8. Restart your  server.
    If you accidentally delete <frevvo-home>\tomcat\conf\Catalina\localhost\frevvo.xml, restart tomcat and a new copy will be created from a pristine one stored in frevvo.war!META-INF/context.xml .
    Column
    width400px

    On this page:

    Table of Contents
    maxLevel1

    ...

    There are 3 choices for the config.properties file location. You can:
    1. Expand the war, edit/create the /WEB-INF/config.properties re-zip the war. This is essentially the same as editing the web.xml directly. 
    2. Create the file in the current working directory of the container you are using.  will pick it up by default. For example, <frevvo-home>/tomcat is the current working directory for the tomcat container.       
    3. Place the config.properties somewhere in the file system (outside the frevvo.war) and then add  -Dfrevvo.config=file:Drive:/path to config.properties in the java executable call. For example, add it to <frevvo-home>\tomcat\bin\setenv.bat, setenv.sh or service.bat if you are using the tomcat container. Here is an example of the <frevvo-home>\tomcat\bin\setenv.bat file with the added parameter: 

    Code Block
    set JAVA_OPTS=-Xms256m -Xmx1024m -XX:MaxPermSize=156m -XX:+UseConcMarkSweepGC -XX:+CMSClassUnloadingEnabled -Dfile.encoding=UTF-8 -Djava.awt.headless=true -Dfrevvo.config=file:C:/frevvo/tomcat/frevvo-config.properties

    The value of frevvo.config can be a full path (e.g. Drive:/pathtomyconfig.properties), a path in the war (e.g. /WEB-INF/myconfig.properties) or a url (e.g. http://config/cluster1/myconfig.properties). Be sure to include the config.properties file name in the path statement.      

    ...

    • Login to your  server as user "adminadmin@d", password "admin".
    • On the page that is displayed, click the "Manage Tenants" link.
    • Click the icon to manage tenant named "d (Default tenant)"
    • Click "Manage Users"
    • Click the  icon for the admin user. This displays a profile form.
    • Change the password as desired and submit the form.

    ...

    • Unable to contact license server
    • Unable to renew license. Your license will expire in <n> day(s)

    External URLs

    Sometimes running  behind running  behind a proxy server can cause unintended changes to the form server's external URLs. The following configuration parameters address this issue.. The following configuration parameters address this issue. These parameters can be added to frevvo war settings section of the <frevvo-home>\tomcat\conf\Catalina\localhost\frevvo.xml file. 

    • frevvo.forms.server.external.url - If set, all share dialogs for forms and flows will use this as the external URL. Use the syntax shown in the example. change the <myexternalhost>and <port> to your external server name and the port that you are using for  on this server. 

      Code Block
      <Parameter name="frevvo.forms.server.external.
      url - If set, all share dialogs for forms and flows will use this as the external URL.
      url" value="http://<myexternalhost>:<port>" override="false"/>
    • frevvo.internal.baseurl - If set, all URLs used internally by the form server will use this base url. This may be needed when using frevvo.forms.server.external.url if that external url is not also accessible from the form server machine.

    Examples:

    ...

    •  Use the syntax shown in the example. change the value "http://localhost:8082"  to the server name and port of your  server.

      Code Block
      <Parameter name="frevvo.

    ...

    • internal.baseurl" value="http://

    ...

    • localhost:8082" override="false"/>

    Default Port

    By default the  tomcat bundle is configured to bind to port 8082. You can change the port by:

    ...

    Additional info on how to use SSL on tomcat can be found on the Apache/Tomcat website. Also refer to this article: How to solve javax.net ssl. SSLHandshakeException?

    Currently you must not disable 's http port. In a future release this will be allowed. Disabling ' http port will cause your form server to malfunction as  requires this port. For most cases it is sufficient to share the https version of your form/flow's Url and leave http open. However, if you want to force all form usage to be over https and feel it is not enough to simply share the https form Urls (as a user can switch to http as long as that port is open), we recommend that you deploy  behind an Apache or IIS server. Close the http port on Apache or IIS but leave tomcat's http port open so that  can POST back to itself when needed over http but no one outside can access it.

    ...

    Note

    If you plan to run the  Tomcat bundle on IBM J9 JVM  and you want to have the HTTPS connector enabled, you will need to change the encryption algorithm to IBM's X509 from the default Sun Oracle X509 implementation.

    To run HTTPS on IBM J9 JVM, add algorithm="IbmX509" attribute to the HTTPS connector:

    ...

    Tip

    Java 7 will throw a "SEVERE: java.net.SocketException: Invalid argument: no further information" error in the <frevvo-home>/tomcat/logs/catalina.YYYY-MM-DD.log when used on a Windows 2003 system with Tomcat version 7.0.29 or earlier and the NIO http connector. If you should encounter this error, check the version of Tomcat. If it is below 7.0.30, upgrade to that version. Run the <frevvo-home>\tomcat\version.bat (Windows) or <frevvo-home>/tomcat/version.sh (UNIX) files to determine the version of Tomcat installed on your system.

    ...

    Tomcat Logfiles

    By default, the  server writes useful logging information to a daily logging file located here: <frevvo-home>/tomcat/logs/frevvo.log. You will see the logfiles listed below in <frevvo-home>/tomcat/logs. The current date appends to the logfile name for all the files except the frevvo log:

    ...

    Code Block
    <Valve className="org.apache.catalina.valves.AccessLogValve" directory="${catalina.base}/logs"
                   prefix="localhost_access_log." suffix=".txt"
                   pattern="%h %l %u %t &quot;%r&quot; %s %b &quot;%{Referer}r&quot; &quot;%{User-Agent}r&quot; [%I %{JSESSIONID}c]" />

     

    ...

    " />
    • host-manager.MM-DD.-YYYY.log - this logfile is part of the tomcat distribution and tomcat distribution and is empty by default - this . It is the a log file for the tomcat host-manager web application which that is used to check the status of web apps, memory usage etc. Messages manage virtual hosts in tomcat. The host manager web-app is typically not needed because  is preconfigured. Messages are written to this log only if the manager web app is being used. 

    ...

    There will be three additional logfiles when running Tomcat as a Windows service:

    ...

    • the host-manager web application is being used.
    • manager.MM-DD.

    ...

    Debugging logfile levels

    The logging levels used by  can be fine-tuned by editing the <frevvo -home>/tomcat/lib/logback.xml file. By default  log level is set to INFO. The logging infrastructure will scan this file every 60 secs so you can live-change the log level. Here
    is more configuration information
    .  Stop  to delete the logfiles. They will be recreated on start up.  

    You can obtain more debugging information, if needed, by following the steps below to change the loglevel. You will see the results of the changes in  <frevvo-home>/tomcat/logs/frevvo.log. 

    ...

    • YYYY.log - this logfile is part of the tomcat distribution and is empty by default - this is the log file for the tomcat manager web application which is used to check the status of web apps, memory usage etc. Messages are written to this log only if the manager web app is being used. 
    Note

    There will be three additional logfiles when running Tomcat as a Windows service:

    • frevvoforms - stderr.YYYYMMDD and frevvoforms - stdout.YYYYMMDD for standard error messages and standard output stream, respectively. This is the default Tomcat behavior.
    • commons-daemon.YYYY-MM-DD.log for Windows Service errors

    Debugging logfile levels

    The logging levels used by  can be fine-tuned by editing the <frevvo -home>/tomcat/lib

    ...

    /logback.xml

    ...

    Loglevels are : TRACE, DEBUG, INFO, WARN, ERROR, OFF. ALL.  They are case -sensitive so be sure to type them in upper case.  The logging level is cummulative as shown below. Refer to this website for a description of the loglevels and some guidelines for using them.

    • OFF = turns all logging off
    • ERROR = ERROR 
    • WARN = WARN + ERROR,  
    • INFO = INFO + WARN + ERROR,
    • DEBUG = DEBUG + INFO + WARN + ERROR,  
    • TRACE = DEBUG + INFO + WARN +  ERROR
    • ALL= turns all logging on

    Configuring the logging level for catalina.log, localhost.log, host-manager.log, manager.log and local_access.log is done in  file. By default  log level is set to INFO. The logging infrastructure will scan this file every 60 secs so you can live-change the log level. Here is more configuration information .  Stop  to delete the logfiles. They will be recreated on start up.  

    You can obtain more debugging information, if needed, by following the steps below to change the loglevel. You will see the results of the changes in  <frevvo-home>/tomcat/conflogs/logging.properties Click here for more information. 

    If you are having issues running the server in an environment with proxy setups, load balancers etc. the forms.ui.filter logger can help. This logger will output additional information to the frevvo.log file to assist in determining what the frevvo servlet is seeing. To enable this logger uncomment the following line in logback.xml:

    Code Block
    languagehtml/xml
    <logger name="com.forms.forms.ui.filter" level="DEBUG" />

    Logfile Rotation

    The  tomcat bundle install will automatically rotate log files daily. The logfile is the only one affected. Let's say the current date is 6 - 19 - 2013. The current days logging is saved to the frevvo.log file located in <frevvo-home>/tomcat/logs.  On the next day, 6 - 20 - 2013,  the log from the previous day is copied to a logfile stamped with the previous day's date. (frevvo_2013-06-19). This date stamped frevvo.log is moved into the <frevvo-home>\tomcat\logs\old directory. Logging for 6 - 20 - 2013 is saved in the frevvo.log in <frevvo-home>/tomcat/logs.

    Session Timeout

    's default web browser session timeout is 480 minutes. If a user is logged into the  server to design forms, or to view their task list, or is using a  form and filling in values but has not yet submitted the form, the session will expire after 480 minutes of inactivity. When the session expires the designer will have to re-login to  to continue designing forms and form users will have to get a new instance of the form and re-enter the values.

    If the maximum number of concurrent users are logged in simultaneously, and any of them are idle for more than 480 minutes, the next person who tries to log in will be able to do so successfully.

    The session timeout can be changed by editing <frevvo-home>\frevvo\tomcat\webapps\frevvo\WEB-INF\web.xml. The session timeout setting unit is minutes. For example, to change from an 480 minutes (8 hr) session timeout to a 1 hour timeout change 480 to 60.

    Code Block
    languagehtml/xml
    <session-config>
        <session-timeout>480</session-timeout>
    </session-config>

    The default  server session timeout can be overridden for each tenant. See the Edit Tenant topic for more information.

    Tip
    Tomcat session-config parameters can not be overridden in frevvo.xml.

    When a session times out, for example when a person is using a form and then pauses for longer than the configured <session-timeout>, they will see the following error the next time they enter a value into the form.

    Image Removed

    The following screen displays when a user tries to submit a form from a timed out session.

    Image Removed

    Editing Submissions

    Submissions can be edited via the Submissions Page. This feature is disabled by default for  in-house users. To enable this feature,  add the frevvo.submissions.edit.link configuration parameter to the <frevvo-home>/WEB-INF/web.xml.  For more
    details
    on the feature that this parameter controls see Editing Submissions. The web.xml file must be unzipped from the frevvo.war before it can be edited. See above for the details. 

    Hardware Requirements

    The minimum recommended hardware configuration for your Live Forms server is:

    • 2 gigahertz (GHz) 32-bit (x86) or 64-bit (x64) processor
    • 4 gigabyte (GB) of system memory
    • 100 GB hard drive

    However you must size your hardware platform to your specific form usage characteristics. As the number of concurrent users and forms increases so must the system memory. For a medium use production server consider increasing the JVM RAM allocation to 6 or 8 gigabytes. Refer to the memory configuration topic below.

    Memory Configuration

    The  Tomcat bundle comes pre-configured with default memory usage settings. While the defaults are sufficient for initial usage, as your forms, business logic and submissions grow, so will the memory needs of the   server.

    The first important step is to ensure that  is installed on a machine with sufficient cpu and ram. "Sufficient" depends on your  usage (number of users, number of forms in use, number of submissions per day, etc..).

    Tip

    After making memory configuration changes you must restart the server.

    You will know when you need to increase allocated memory when you see two common errors appear in the Tomcat logfiles <frevvo-home>//tomcat/logs. You can tune the frevvo/tomcat installation by editing <frevvo-home>/tomcat/bin/setenv.bat on windows and setenv.sh on unix.

    You'll see something like this in setenv.[bat,sh]:

    Code Block
    languagebash
    set JAVA_OPTS=-Xms128m -Xmx512m -Djava.awt.headless=true
    -Dfrevvo.users.path="%CATALINA_HOME%\..\data\users"

    OutOfMemoryError: Java heap space

    SEVERE: Servlet.service() for servlet jsp threw exception
    java.lang.OutOfMemoryError: Java heap space

    To solve this edit setenv.[bat,sh] to increase the minimum and maximum heap size via the parameters: -Xmx and -Xms.

    For example: -Xmx512m to -Xmx1g. Make sure also that the machine where  is installed has enough memory installed. If you change -Xmx to 1g your machine will need more then 1g ram.

    OutOfMemoryError: PermGen space

    MemoryError: PermGen space
    java.lang.OutOfMemoryError: PermGen space

    Java has a fixed space allocated for classes and other statics that is usually enough in normal cases, but could be quickly filled up if there is on the fly code generation or significant business logic in your forms.

    To solve this edit setenv.[bat,sh] increase the maximum perm size via the paramenter: -XX:MaxPermSize

    For example: -XX:MaxPermSize=128M

    Live Forms as a windows service

    You will have to edit frevvo/tomcat/bin/service.bat line 123 to increase the Java Heap and Permgen spaces. Here is an example of the line you need to edit in that file:

    Code Block
    languagebash
    "%EXECUTABLE%" //US//%SERVICE_NAME% ++JvmOptions "-XX:MaxPermSize=128m 
    -Djava.io.tmpdir=%CATALINA_BASE%\temp;
    -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager;
    -Djava.util.logging.config.file=%CATALINA_BASE%\conf\logging.properties" 
    --JvmMs 128 --JvmMx 512

    See the documentation on Tomcat Windows Service for more details.

    TIFF Image Generator

    Several  connector wizards, such as the Email and the PaperVision/ImageSilo wizards, allow you to select the form image attached to submission emails and stored into PaperVision/ImageSilo to be in TIFF image format. If the TIFF option doesn't appear in the wizard's Send Snapshot dropdown, then you have not yet installed the necessary TIFF image generator software.

    ...

    You will now see the TIFF option in Send Snapshot dropdown. Form additional installation details and for various hardware platforms, please refer to the Java Image I/O Installation Guide.

    Info

    At this time, installing this generator on a system running an installed JDK, with the JDK_Home environment variable set, will not work.

    Signature Date/Time

    Digital Signatures require no configuration. However you can control the format of the date stamp that appears when forms are signed. These two parameters in <frevvo-home>\tomcat\webapps\frevvo\WEB-INF\web.xml are for signature configuration. The first you should never need to change.

    Code Block
    languagehtml/xml
    <context-param>
      <param-name>frevvo.signature.class</param-name>
      <param-value>com.frevvo.signature.DefaultSignature</param-value>
      <description>Digital signature class name</description>
    </context-param>
    <context-param>
      <param-name>frevvo.signature.date.format</param-name>
      <param-value>d MMM yyyy, z</param-value>
      <description>Default date format for display</description>
    </context-param>

    Timezones

     concanocolizes all form submission data to UTC. In other words no matter which timezone you are in when you submit a form with a date, date/time, or time control, the form server will convert and store those values in UTC. If your form submission data is not correctly converted and stored in UTC then you likely have to update the timezones in your installed JRE/JDK. Oracle provides a timezone update tool. Run the TZUpdater tool with the following command: java -jar tzupdate.jar -u

    See Oracle's Timezone Updater Tool for full details. 

    Using Live Forms with reverse-proxies/SSL-accelerators

    If your goal is to use   behind a reverse-proxy/load-balancer/SSL-accelerator you need to add a few configuration settings to /Tomcat to make sure  generate correct external urls.

    When using a reverse-proxy, the external host, IP and/or port visible to browsers may be different than the host, IP and/or port seen by Tomcat. This causes a problem since  will generate urls in pages and forms that are either completely invalid, which is an easy case to spot since forms will not render at all, or valid by bypassing the reverse-proxy altogether, which are harder to identify except for side effects such as forms not resizing properly, or blocked by browser security restrictions.

    For cases where you have only a web-server fronting  as a reverse-proxy (e.g. Apache or IIS), you can setup the web-server to communicate with Tomcat using AJP. This works since AJP provides additional metadata when communicating with Tomcat to indicate the actual remote host/ip/port instead of the web-server's host/ip/port.

    However, using the AJP connector will not work for all cases. For instance, if you have a reverse-proxy/load-balancer/SSL-accelerator in front of your web-server, which is fronting /Tomcat, AJP would then report to Tomcat the host/ip/port of the reverse-proxy and not of the actual client. In these cases you have to leverage a feature provided by most reverse-proxies where they generate additional HTTP headers, like X-Forwarded-For, which contains the original client IP.  can then make use of these headers to override the host, IP and/or port of the external urls it generates. This is done using the following web.xml context parameters:

    • frevvo.xforwarded.protocol.header - Identifies the name of the HTTP header containing the original request's protocol (SSL accelerators, for instance, will expose https to external clients by forward to internal services using http)
    • frevvo.xforwarded.host.header - Identifies the name of the HTTP header containing the original request's host
    • frevvo.xforwarded.port.header - Identifies the name of the HTTP header containing the original request's port

    By default, 's web.xml will contain the following values for these context parameters:

    Code Block
    languagehtml/xml
    <context-param>
     <param-name>frevvo.xforwarded.protocol.header</param-name>
     <param-value>X-Forwarded-Protocol</param-value>
    </context-param>
    <context-param>
     <param-name>frevvo.xforwarded.host.header</param-name>
     <param-value>X-Forwarded-Host</param-value>
    </context-param>
    <context-param>
     <param-name>frevvo.xforwarded.port.header</param-name>
     <param-value>X-Forwarded-Port</param-value>
    </context-param>

    You can change these parameter values to match the header names set by your reverse-proxy or change the reverse-proxy configuration to match these defaults. You can also leave any of these parameter values blank and  will then use the current request's protocol, host or port, if that makes sense in your case.

    As a final note, if you plan to override these context parameter values and if you are using the  Tomcat bundle, we suggest doing so in frevvo/tomcat/conf/Catalina/localhost/frevvo.xml, since that would keep all your configurations in one place and makes it easy to upgrade  to newer releases. You can do that by adding the following to your frevvo.xml file:

    Code Block
    languagehtml/xml
    <Parameter name="frevvo.xforwarded.protocol.header" value="X-Forwarded-Protocol" override="false"/>
    <Parameter name="frevvo.xforwarded.host.header" value="X-Forwarded-Host" override="false"/>
    <Parameter name="frevvo.xforwarded.port.header" value="X-Forwarded-Port" override="false"/>

    Moving users to a different tenant

    This section describes how to move a user to a different tenant. In the steps below, we will move the user john from a source tenant (will use tenant d) to a target tenant (will use mytenant as the target name).

    1. If the target tenant does not exist, create it by following these steps. For the sake of this document, I will assume the target tenant id to be mytenant
    2. Login to the target tenant as an admin and create a user with the same id as the user in the original tenant. In this example, the user id is john in the tenant mytenant.
    3. Transfer the applications to the new user account in the target tenant
      1. Login to the source tenant as a tenant admin. For instance admin@d
      2. Navigate to Manage > Manage Users.
      3. Login as the user you want to move. 
      4. Navigate to the user's applications page. 
      5. Download each application for that user and save to a folder in your file system. 
      6. Logout
      7. Login as the user in the new tenant: john@mytenannt.
      8. Upload the applications you've downloaded in the previous steps. 
    4. Move the submissions in the submissions repository. You need to run these steps in the database where you persist the  submissions. Please back up your database before moving forward
      1. Login to your database.
      2. Edit the script shown below to:
        1. Replace the word johnwith the id of the user you are migrating.
        2. Replace the tenant id d with the id of the source tenant. The default tenant in  is called d so if you are moving the user as part of an upgrade from 3.4.x chances are that your source tenant is d
        3. Replace the word mytenant with the name of your target tenant 
      3. Run the script shown below in your  submissions database.

     

    Code Block
    update formsubmission
    set tenantid='mytenant'
    where id in (
    select fs.id from formsubmission fs, formsubmissiontype fst 
    where 
    fs.formsubmissiontype_formtype_id = fst.id
    and fst.ownerid='john'
    and fs.tenantid='d'
    )update formsubmissiontype
    set tenantid='mytenant'
    where ownerid='john'
    and tenantid='d'

    Verification:

    1. Login as the user in the new tenant.
    2. Verify that the submissions are properly being loaded for all forms. In the submissions repository page make sure to adjust the initial and end dates to a window of time that you know have submissions for that specific form.
    3. Update references to the forms. After going trough the steps above, the URL to the forms owned by the user will be different than what they were originally. You need to update all references to the forms in published links and pages where the form should be embedded.

    Show/Hide Tenant Login

     is a multi-tenant application. See the administration section on Manage Tenants. However, it is possible that all you need is a single tenant. If this is your case it simplifies  server login if you hide the tenant input on the  login page.

    This can be changed by editing <frevvo-home>\tomcat\webapps\frevvo\WEB-INF\web.xml. Uncomment the frevvo.default.login.tenent.id parameter and set the param-value to the name of your one tenant. Next set the param-value of frevvo.login.show.tenant to false.

    Here is how the parameters appear after editing:

    Code Block
    <context-param>
            <param-name>frevvo.default.login.tenant.id</param-name>
            <param-value>ssotest</param-value>
            <description>Default Tenant</description>
    </context-param>
    <context-param>
            <param-name>frevvo.login.show.tenant</param-name>
            <param-value>false</param-value>
            <description>Show Tenant Box on Login Page</description>
    </context-param>

    Restart your  server and the next time you login you will only need to enter your username and password.

    Note

    These two config parameters can also be overridden in <frevvo-home>\tomcat\conf\Catalina\localhost\frevvo.xml. This keeps all your modified parameters in one place and makes it easy to upgrade to newer releases.

    Code Block
    <Parameter name="frevvo.default.login.tenant.id" value="mytenant" override="false"/>  
    Note

    If you need to login as the ' server superuser admin you must login with username admin@d.

    frevvo.log. 

    1. Go to <frevvo-home>/tomcat/lib
    2. Open the file logback.xml for editing
    3. Find <root level="INFO"> and change the word INFO to DEBUG. Save the file.

    Loglevels are : TRACE, DEBUG, INFO, WARN, ERROR, OFF. ALL.  They are case -sensitive so be sure to type them in upper case.  The logging level is cummulative as shown below. Refer to this website for a description of the loglevels and some guidelines for using them.

    • OFF = turns all logging off
    • ERROR = ERROR 
    • WARN = WARN + ERROR,  
    • INFO = INFO + WARN + ERROR,
    • DEBUG = DEBUG + INFO + WARN + ERROR,  
    • TRACE = DEBUG + INFO + WARN +  ERROR
    • ALL= turns all logging on

    Configuring the logging level for catalina.log, localhost.log, host-manager.log, manager.log and local_access.log is done in <frevvo-home>/tomcat/conf/logging.properties Click here for more information. 

    If you are having issues running the server in an environment with proxy setups, load balancers etc. the forms.ui.filter logger can help. This logger will output additional information to the frevvo.log file to assist in determining what the frevvo servlet is seeing. To enable this logger uncomment the following line in logback.xml:

    Code Block
    languagehtml/xml
    <logger name="com.forms.forms.ui.filter" level="DEBUG" />

    Logfile Rotation

    The  tomcat bundle install will automatically rotate log files daily. The logfile is the only one affected. Let's say the current date is 6 - 19 - 2013. The current days logging is saved to the frevvo.log file located in <frevvo-home>/tomcat/logs.  On the next day, 6 - 20 - 2013,  the log from the previous day is copied to a logfile stamped with the previous day's date. (frevvo_2013-06-19). This date stamped frevvo.log is located in the <frevvo-home>\tomcat\logs\old directory. Logging for 6 - 20 - 2013 is saved in the frevvo.log in <frevvo-home>/tomcat/logs.

    Session Timeout

    's default web browser session timeout is 480 minutes. If a user is logged into the  server to design forms, or to view their task list, or is using a  form and filling in values but has not yet submitted the form, the session will expire after 480 minutes of inactivity. When the session expires the designer will have to re-login to  to continue designing forms and form users will have to get a new instance of the form and re-enter the values.

    If the maximum number of concurrent users are logged in simultaneously, and any of them are idle for more than 480 minutes, the next person who tries to log in will be able to do so successfully.

    The session timeout can be changed by editing <frevvo-home>\frevvo\tomcat\webapps\frevvo\WEB-INF\web.xml. The session timeout setting unit is minutes. For example, to change from an 480 minutes (8 hr) session timeout to a 1 hour timeout change 480 to 60.

    Code Block
    languagehtml/xml
    <session-config>
        <session-timeout>480</session-timeout>
    </session-config>

    The default  server session timeout can be overridden for each tenant. See the Edit Tenant topic for more information.

    Tip
    Tomcat session-config parameters can not be overridden in frevvo.xml.

    When a session times out, for example when a person is using a form and then pauses for longer than the configured <session-timeout>, they will see the following error the next time they enter a value into the form.

    Image Added

    The following screen displays when a user tries to submit a form from a timed out session.

    Image Added

    Editing Submissions

    Designer users can view/edit submissions by clicking the edit link on the submissions panel. Non designer users can view/edit submissions by clicking on the Shared Items tab if they have been granted permission to do so by the designer via the Access Control feature. The frevvo.submission.edit .link parameter must be set to the default value of true, for the edit link to be visible to any  user. To disable the edit link on the submission panel, change the default value of true to false for the frevvo.submissions.edit.link configuration parameter in <frevvo-home>/WEB-INF/web.xml file. The web.xml file must be unzipped from the frevvo.war before it can be edited. Follow the instructions above to unzip, modify and rezip the war file.  

    Code Block
    <context-param>  
        <param-name>frevvo.submission.edit.link</param-name> 
        <param-value>false</param-value> 
        <description>Show a link to edit the submission.</description> 
    </context-param>

    You can add the frevvo.submission.edit.link configuration property to the <frevvo-home>\tomcat\conf\catalina\localhost\frevvo.xml file instead of the web.xml file as discussed above. Here is an example that will disable submission editing when added to the frevvo war settings section of frevvo.xml:  

    Code Block
    <Parameter name="frevvo.submission.edit.link" value="false" override="false"/>

     When the frevvo.submission.edit.link parameter has a value of false, the edit link is not visible on on form submission panels.  

    Image Added  

    Hardware Requirements

    The minimum recommended hardware configuration for your Live Forms server is:

    • 2 gigahertz (GHz) 32-bit (x86) or 64-bit (x64) processor
    • 4 gigabyte (GB) of system memory
    • 100 GB hard drive

    However you must size your hardware platform to your specific form usage characteristics. As the number of concurrent users and forms increases so must the system memory. For a medium use production server consider increasing the JVM RAM allocation to 6 or 8 gigabytes. Refer to the memory configuration topic below.

    Memory Configuration

    The  Tomcat bundle comes pre-configured with default memory usage settings. While the defaults are sufficient for initial usage, as your forms, business logic and submissions grow, so will the memory needs of the   server.

    The first important step is to ensure that  is installed on a machine with sufficient cpu and ram. "Sufficient" depends on your  usage (number of users, number of forms in use, number of submissions per day, etc..).

    Tip

    After making memory configuration changes you must restart the server.

    You will know when you need to increase allocated memory when you see two common errors appear in the Tomcat logfiles <frevvo-home>//tomcat/logs. You can tune the frevvo/tomcat installation by editing <frevvo-home>/tomcat/bin/setenv.bat on windows and setenv.sh on unix.

    You'll see something like this in setenv.[bat,sh]:

    Code Block
    languagebash
    set JAVA_OPTS=-Xms128m -Xmx512m -Djava.awt.headless=true
    -Dfrevvo.users.path="%CATALINA_HOME%\..\data\users"

    OutOfMemoryError: Java heap space

    SEVERE: Servlet.service() for servlet jsp threw exception
    java.lang.OutOfMemoryError: Java heap space

    To solve this edit setenv.[bat,sh] to increase the minimum and maximum heap size via the parameters: -Xmx and -Xms.

    For example: -Xmx512m to -Xmx1g. Make sure also that the machine where  is installed has enough memory installed. If you change -Xmx to 1g your machine will need more then 1g ram.

    OutOfMemoryError: PermGen space

    MemoryError: PermGen space
    java.lang.OutOfMemoryError: PermGen space

    Java has a fixed space allocated for classes and other statics that is usually enough in normal cases, but could be quickly filled up if there is on the fly code generation or significant business logic in your forms.

    To solve this edit setenv.[bat,sh] increase the maximum perm size via the paramenter: -XX:MaxPermSize

    For example: -XX:MaxPermSize=128M

    Live Forms as a windows service

    You will have to edit frevvo/tomcat/bin/service.bat line 123 to increase the Java Heap and Permgen spaces. Here is an example of the line you need to edit in that file:

    Code Block
    languagebash
    "%EXECUTABLE%" //US//%SERVICE_NAME% ++JvmOptions "-XX:MaxPermSize=128m 
    -Djava.io.tmpdir=%CATALINA_BASE%\temp;
    -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager;
    -Djava.util.logging.config.file=%CATALINA_BASE%\conf\logging.properties" 
    --JvmMs 128 --JvmMx 512

    See the documentation on Tomcat Windows Service for more details.

    TIFF Image Generator

    Several  connector wizards, such as the Email and the PaperVision/ImageSilo wizards, allow you to select the form image attached to submission emails and stored into PaperVision/ImageSilo to be in TIFF image format. If the TIFF option doesn't appear in the wizard's Send Snapshot dropdown, then you have not yet installed the necessary TIFF image generator software.

    1. Download the JavaTM Advanced Imaging Image I/O Tools installer for your machine platform here. Your machine must be running have the Java Runtime Environment installed. For example on a windows platform:
      1. Download and run jai_imageio-1_1-lib-windows-i586-jre.exe

    2. Execute the installer on your machine. This automatically copies the libraries necessary to create TIFF images into your java installation directory.
    3. Restart the  server.

    You will now see the TIFF option in Send Snapshot dropdown. Form additional installation details and for various hardware platforms, please refer to the Java Image I/O Installation Guide.

    Info

    At this time, installing this generator on a system running an installed JDK, with the JDK_Home environment variable set, will not work.

    Signature Date/Time

    Digital Signatures require no configuration. However you can control the format of the date stamp that appears when forms are signed. These two parameters in <frevvo-home>\tomcat\webapps\frevvo\WEB-INF\web.xml are for signature configuration. The first you should never need to change.

    Code Block
    languagehtml/xml
    <context-param>
      <param-name>frevvo.signature.class</param-name>
      <param-value>com.frevvo.signature.DefaultSignature</param-value>
      <description>Digital signature class name</description>
    </context-param>
    <context-param>
      <param-name>frevvo.signature.date.format</param-name>
      <param-value>d MMM yyyy, z</param-value>
      <description>Default date format for display</description>
    </context-param>

    Timezones

     concanocolizes all form submission data to UTC. In other words no matter which timezone you are in when you submit a form with a date, date/time, or time control, the form server will convert and store those values in UTC. If your form submission data is not correctly converted and stored in UTC then you likely have to update the timezones in your installed JRE/JDK. Oracle provides a timezone update tool. Run the TZUpdater tool with the following command: java -jar tzupdate.jar -u

    See Oracle's Timezone Updater Tool for full details. 

    Using Live Forms with reverse-proxies/SSL-accelerators

    If your goal is to use   behind a reverse-proxy/load-balancer/SSL-accelerator you need to add a few configuration settings to /Tomcat to make sure  generate correct external urls.

    When using a reverse-proxy, the external host, IP and/or port visible to browsers may be different than the host, IP and/or port seen by Tomcat. This causes a problem since  will generate urls in pages and forms that are either completely invalid, which is an easy case to spot since forms will not render at all, or valid by bypassing the reverse-proxy altogether, which are harder to identify except for side effects such as forms not resizing properly, or blocked by browser security restrictions.

    For cases where you have only a web-server fronting  as a reverse-proxy (e.g. Apache or IIS), you can setup the web-server to communicate with Tomcat using AJP. This works since AJP provides additional metadata when communicating with Tomcat to indicate the actual remote host/ip/port instead of the web-server's host/ip/port.

    However, using the AJP connector will not work for all cases. For instance, if you have a reverse-proxy/load-balancer/SSL-accelerator in front of your web-server, which is fronting /Tomcat, AJP would then report to Tomcat the host/ip/port of the reverse-proxy and not of the actual client. In these cases you have to leverage a feature provided by most reverse-proxies where they generate additional HTTP headers, like X-Forwarded-For, which contains the original client IP.  can then make use of these headers to override the host, IP and/or port of the external urls it generates. This is done using the following web.xml context parameters:

    • frevvo.xforwarded.protocol.header - Identifies the name of the HTTP header containing the original request's protocol (SSL accelerators, for instance, will expose https to external clients by forward to internal services using http)
    • frevvo.xforwarded.host.header - Identifies the name of the HTTP header containing the original request's host
    • frevvo.xforwarded.port.header - Identifies the name of the HTTP header containing the original request's port

    By default, 's web.xml will contain the following values for these context parameters:

    Code Block
    languagehtml/xml
    <context-param>
     <param-name>frevvo.xforwarded.protocol.header</param-name>
     <param-value>X-Forwarded-Protocol</param-value>
    </context-param>
    <context-param>
     <param-name>frevvo.xforwarded.host.header</param-name>
     <param-value>X-Forwarded-Host</param-value>
    </context-param>
    <context-param>
     <param-name>frevvo.xforwarded.port.header</param-name>
     <param-value>X-Forwarded-Port</param-value>
    </context-param>

    You can change these parameter values to match the header names set by your reverse-proxy or change the reverse-proxy configuration to match these defaults. You can also leave any of these parameter values blank and  will then use the current request's protocol, host or port, if that makes sense in your case.

    As a final note, if you plan to override these context parameter values and if you are using the  Tomcat bundle, we suggest doing so in frevvo/tomcat/conf/Catalina/localhost/frevvo.xml, since that would keep all your configurations in one place and makes it easy to upgrade  to newer releases. You can do that by adding the following to your frevvo.xml file:

    Code Block
    languagehtml/xml
    <Parameter name="frevvo.xforwarded.protocol.header" value="X-Forwarded-Protocol" override="false"/>
    <Parameter name="frevvo.xforwarded.host.header" value="X-Forwarded-Host" override="false"/>
    <Parameter name="frevvo.xforwarded.port.header" value="X-Forwarded-Port" override="false"/>

    Moving users to a different tenant

    This section describes how to move a user to a different tenant. In the steps below, we will move the user john from a source tenant (will use tenant d) to a target tenant (will use mytenant as the target name).

    1. If the target tenant does not exist, create it by following these steps. For the sake of this document, I will assume the target tenant id to be mytenant
    2. Login to the target tenant as an admin and create a user with the same id as the user in the original tenant. In this example, the user id is john in the tenant mytenant.
    3. Transfer the applications to the new user account in the target tenant
      1. Login to the source tenant as a tenant admin. For instance admin@d
      2. Navigate to Manage > Manage Users.
      3. Login as the user you want to move. 
      4. Navigate to the user's applications page. 
      5. Download each application for that user and save to a folder in your file system. 
      6. Logout
      7. Login as the user in the new tenant: john@mytenannt.
      8. Upload the applications you've downloaded in the previous steps. 
    4. Move the submissions in the submissions repository. You need to run these steps in the database where you persist the  submissions. Please back up your database before moving forward
      1. Login to your database.
      2. Edit the script shown below to:
        1. Replace the word johnwith the id of the user you are migrating.
        2. Replace the tenant id d with the id of the source tenant. The default tenant in  is called d so if you are moving the user as part of an upgrade from 3.4.x chances are that your source tenant is d
        3. Replace the word mytenant with the name of your target tenant 
      3. Run the script shown below in your  submissions database.

     

    Code Block
    update formsubmission
    set tenantid='mytenant'
    where id in (
    select fs.id from formsubmission fs, formsubmissiontype fst 
    where 
    fs.formsubmissiontype_formtype_id = fst.id
    and fst.ownerid='john'
    and fs.tenantid='d'
    )update formsubmissiontype
    set tenantid='mytenant'
    where ownerid='john'
    and tenantid='d'

    Verification:

    1. Login as the user in the new tenant.
    2. Verify that the submissions are properly being loaded for all forms. In the submissions repository page make sure to adjust the initial and end dates to a window of time that you know have submissions for that specific form.
    3. Update references to the forms. After going trough the steps above, the URL to the forms owned by the user will be different than what they were originally. You need to update all references to the forms in published links and pages where the form should be embedded.

     

    Show/Hide Share Dialog Options

    ...

    Code Block
    <Parameter name="frevvo.palette.controls" value="Dropdown" value="Dropdown,Radio,Checkbox,Section,Repeat,Tabs,Panel,Table,Message" override="false"/>

     The frevvo.palette.controls parameter exists in the web.xml file. Here is an example of the modified configuration parameter that will display only ten controls. Be sure to unzip/rezip the frevvo.war file, as described above, when the changes are complete.  

    Info
    <context-param>
    <param-name>frevvo.palette.controls</param-name>
    <param-value>Dropdown,Radio,Checkbox,Section,Repeat,Tabs,Panel,Table,Message" override="false"/>

     The frevvo.palette.controls parameter exists in the web.xml file. Here is an example of the modified configuration parameter that will display only ten controls. Be sure to unzip/rezip the frevvo.war file, as described above, when the changes are complete.  

    Info
    <context-param>
    <param-name>frevvo.palette.controls</param-name>
    <param-value>Dropdown,Radio,Checkbox,Section,Repeat,Tabs,Panel,Table,Message,Link</param-value>
    <description>Which controls are displayed in the palette</description>
    </context-param>

    This image shows the Data Sources section moved to the top, the "New from XSD" button hidden and the palette configured for only ten controls. Remember any parameter in web.xml can be duplicated in frevvo.xml and the value in frevvo.xml takes precedence over the value in web.xml. If you plan to override the web.xml context parameter values and you are using the frevvo Tomcat bundle, we suggest doing so in frevvo.xml.

    Image Removed

    Modifying Content Types for the Upload Control

    The content types supported by  are configured through web.xml using the context parameter: frevvo.upload.file.types. A mime type that is not working for a certain content type can be added to the web.xml file for on-premise customers. Follow the steps above to unzip/rezip the <frevvo-home>/tomcat/webapps/frevvo.war file after the edits to the web.xml file are complete.

    The context parameter, frevvo.upload.file.types is located in the <!-- Upload Control File Types and Corresponding Mime Types --> section of the web.xml file.

    Code Block
    <context-param> <param-name>frevvo.upload.file.types</param-name> <param-value>pdf,MS Word,MS Excel,MS PowerPoint,MS Access,gif,jpeg,png,tiff,rtf,tar,zip,gzip,xml,bmp</param-value> <description>Upload Control File Types for restricting upload by type</description> </context-param>

    In addition, there are context parameters for each supported mime type that corresponds to each context type. For example, the context param that has the mime types corresponding to MS Word is: frevvo.upload.file.type.ms_word.mimes. Note the naming convention for the context type part of the parameter - lower case and spaces replaced with _ 

    Code Block
    <context-param>   <param-name>frevvo.upload.file.type.ms_word.mimes</param-name>   <param-value>application/msword</param-value>   <description>Allowed mimes for this type (comma separated).  Type names is lower cased and spaces replaced with _.</description>  </context-param>

    Edits to the <!-- Upload Control File Types and Corresponding Mime Types --> section of the web.xml file should be reported to  customer support to ensure future releases include the added mime type in the web.xml file of future releases.

    As a preferable alternative, the additional mime type can be typed into the Other Mime/Ex field on the Upload control property pane. Refer to Upload  control for more information.   

    Rule Validation Timeout 

    Rule validation is executed in a thread pool with a timeout. You can change the rule validation timeout value with the context param in web.xml - "frevvo.rule.validation.timeout". The default value is 2000 milliseconds. If validation javascript execution exceeds this timeout value, the Rule Validator will show : 

    Code Block
    Form or Rule Level Validation Issue: Validation Failed Rule validation timed out, possibly due to unparseable rule JavaScript.

    Max Size Attachment

    You can set an upper bound limit server wide for the maximum size of an attachment that can be uploaded via the Upload Control by adding the frevvo.attachment.maxsize context parameter in the  web.xml file. See Modifying the web.xml file above for the details. The same result can be accomplished by overriding the property in the container level by modifying the frevvo.xml.file. This is the recommended approach as frevvo.xml is directly editable while the web.xml file is included in the frevvo.war zipfile that has to be extracted, modified and rezipped after the changes are made. To do that:

    1. Stop .
    2. Locate the frevvo.xml file under the frevvo installation. If you are using the tomcat bundle, it will be in <frevvo-home>\tomcat\conf\catalina\localhost.
    3. Add the line:
    Code Block
    <Parameter name="frevvo.attachment.maxsize" value="10485760" override="false"/>

          3. Replace the value,102400 in this example, with the maximum size of the attachment that you want. The value must be entered in bytes. The default value is 10485760 bytes.

    ...

    ,Table,Message,Link</param-value>
    <description>Which controls are displayed in the palette</description>
    </context-param>

    This image shows the Data Sources section moved to the top, the "New from XSD" button hidden and the palette configured for only ten controls. Remember any parameter in web.xml can be duplicated in frevvo.xml and the value in frevvo.xml takes precedence over the value in web.xml. If you plan to override the web.xml context parameter values and you are using the frevvo Tomcat bundle, we suggest doing so in frevvo.xml.

    Image Added

    Modifying Content Types for the Upload Control

    The content types supported by  are configured through web.xml using the context parameter: frevvo.upload.file.types. A mime type that is not working for a certain content type can be added to the web.xml file for on-premise customers. Follow the steps above to unzip/rezip the <frevvo-home>/tomcat/webapps/frevvo.war file after the edits to the web.xml file are complete.

    The context parameter, frevvo.upload.file.types is located in the <!-- Upload Control File Types and Corresponding Mime Types --> section of the web.xml file.

    Code Block
    <context-param> <param-name>frevvo.upload.file.types</param-name> <param-value>pdf,MS Word,MS Excel,MS PowerPoint,MS Access,gif,jpeg,png,tiff,rtf,tar,zip,gzip,xml,bmp</param-value> <description>Upload Control File Types for restricting upload by type</description> </context-param>

    In addition, there are context parameters for each supported mime type that corresponds to each context type. For example, the context param that has the mime types corresponding to MS Word is: frevvo.upload.file.type.ms_word.mimes. Note the naming convention for the context type part of the parameter - lower case and spaces replaced with _ 

    Code Block
    <context-param>   <param-name>frevvo.upload.file.type.ms_word.mimes</param-name>   <param-value>application/msword</param-value>   <description>Allowed mimes for this type (comma separated).  Type names is lower cased and spaces replaced with _.</description>  </context-param>

    Edits to the <!-- Upload Control File Types and Corresponding Mime Types --> section of the web.xml file should be reported to  customer support to ensure future releases include the added mime type in the web.xml file of future releases.

    As a preferable alternative, the additional mime type can be typed into the Other Mime/Ex field on the Upload control property pane. Refer to Upload  control for more information.   

    Rule Validation Timeout 

    Rule validation is executed in a thread pool with a timeout. You can change the rule validation timeout value with the context param in web.xml - "frevvo.rule.validation.timeout". The default value is 2000 milliseconds. If validation javascript execution exceeds this timeout value, the Rule Validator will show : 

    Code Block
    Form or Rule Level Validation Issue: Validation Failed Rule validation timed out, possibly due to unparseable rule JavaScript.

    Max Size Attachment

    You can set an upper bound limit server wide for the maximum size of an attachment that can be uploaded via the Upload Control by adding the frevvo.attachment.maxsize context parameter in the  web.xml file. See Modifying the web.xml file above for the details. The same result can be accomplished by overriding the property in the container level by modifying the frevvo.xml.file. This is the recommended approach as frevvo.xml is directly editable while the web.xml file is included in the frevvo.war zipfile that has to be extracted, modified and rezipped after the changes are made. To do that:

    1. Stop .
    2. Locate the frevvo.xml file under the frevvo installation. If you are using the tomcat bundle, it will be in <frevvo-home>\tomcat\conf\catalina\localhost.
    3. Add the line:
    Code Block
    <Parameter name="frevvo.attachment.maxsize" value="10485760" override="false"/>

          3. Replace the value,102400 in this example, with the maximum size of the attachment that you want. The value must be entered in bytes. The default value is 10485760 bytes.

          4. Restart .

    Info

    If you are using MySQL, and you upload a large image or you are using a workflow that contains a large pdf, , you may see this error:

    Image Added

    The default value of the max_allowed_packet parameter in your MySQL server may not be large enough. Refer to this website for detailed information about the MySql configuration parameter. Increasing the max_allowed_packet variable setting in your MySQL Server from the default (1M) to something like 16M (16777125) fixes the issue. To fix the issue temporarily, run the following commands:

    • mysql -u root
    • set global max_allowed_packet=16777216

    To permanently set it, choose one of the two methods listed below:

    • You can add the parameter  - max_allowed_packet=16M to the mysqld command line or (mysqld_safe command line) as shown: 

     mysqld --max_allowed_packet=16M 

    • Edit the MySql configuration file (my.ini on Windows/ my.cnf on Mac OS) and add max_allowed_packet=16777216 to the [mysqld] section. 
    Code Block
    [mysqld]
    max_allowed_packet = 16M
    • Restart MySQL.
    • Restart frevvo. 
    • The setting will permanently take effect.

    On Mac OS, you can access the my.cnf file by typing

      • sudo vi /etc/my.cnf

     The location of the my.ini/my.cnf file varies by configuration.

    IBM J9 JVM

    supports IBM's J9 JVM. To use the J9 JVM add the '''algorithm="IbmX509" attribute to the frevvo/tomcat/conf/server.xml's HTTPS <Connector> element. So, instead of this:

    ...