Don’t Run Tomcat as the Root User. … Remove Default Samples and Test Applications. … Set Your Tomcat Permissions Carefully. … Disable Support for TRACE Requests. … Disable SSLv3 Protocols. … Log Your Network Traffic. … Be Careful With the Tomcat Manager App. … Use Realms to Control Resource Access.

How do I configure Tomcat?

1. Go to the Tomcat Web page.
2. Click on Binaries under the Download label on the left side of the page.
3. Scroll down until you see Tomcat 4.1. …
4. Click on the link ending with exe (e.g. 4.1. …
5. Download and run the exe file.
6. I suggest you install Tomcat at c:\tomcat4.

Should Tomcat run as root?

Tomcat should not be run under the root user. Create a dedicated user for the Tomcat process and provide that user with the minimum necessary permissions for the operating system. … File permissions should also be suitably restricted.