Enable TLS in Artifactory

ARTIFACTORY: How to enable TLS within the JFrog Platform

AuthorFullName__c
Amit Turgeman
articleNumber
000005268
FirstPublishedDate
2022-05-15T13:57:12Z
lastModifiedDate
2025-05-14
1. Enable TLS in Artifactory by setting artifactory.tomcat.httpsConnector.enabled in the system.yaml file to true.
artifactory:
    tomcat:
        httpsConnector:
            enabled: true
2. After updating system.yaml, restart Artifactory.
3. Make sure to update each Artifactory node system.yaml with this property as there is no automatic propagation of the system.yaml configuration file.



Note:
By default port 8443 will be used in Artifatory for TLS connections. If you want to change it, update artifactory.tomcat.httpsConnector.port: 8443 accordingly. 

User-added image



The below configuration automaticaclly added to Tomcat server.xml after updating Artifactory.tomcat.httpsConnector.enabled and restart of Artifactory.
Server.xml is located in $JFROG_HOME/artifactory/app/artifactory/tomcat/conf

 <Connector port="8443" protocol="org.jfrog.tomcat.connector.HTTP11NioProtocol" maxThreads="200"  bindOnInit="false" scheme="https" secure="true"
        waitForSSLCertificateFile="/opt/jfrog/artifactory/var/data/router/keys/server.crt"
        waitForSSLCertificateKeyFile="/opt/jfrog/artifactory/var/data/router/keys/server.key" />