# Cis Tomcat101 6.2

> Ensure SSLEnabled is set to True for Sensitive Connectors

- Skill: `cyberstrikeus/cis-tomcat101-6-2` (Agent Skill)
- Install (CLI): `npx skillmds@latest add cyberstrikeus/cis-tomcat101-6-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/cyberstrikeus/cis-tomcat101-6-2/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: cyberstrikeus (https://skillmd.com/u/cyberstrikeus)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/cyberstrikeus/cis-tomcat101-6-2

---


# 6.2 Ensure SSLEnabled is set to True for Sensitive Connectors (Automated)

## Profile Applicability

• Level 1

## Description

The `SSLEnabled` setting determines if SSL is enabled for a specific Connector. It is recommended that SSL be utilized for any Connector that sends or receives sensitive information, such as authentication credentials or personal information.

## Rationale

The `SSLEnabled` setting ensures SSL is active, which will in-turn ensure the confidentiality and integrity of sensitive information while in transit.

## Audit Procedure

Review the `server.xml` and ensure all Connectors sending or receiving sensitive information have the `SSLEnabled` attribute set to `true`.

## Remediation

In `server.xml`, set the `SSLEnabled` attribute to `true` for each Connector that sends or receives sensitive information

```xml
<Connector
…
SSLEnabled="true"
…
/>
```

## Default Value

`SSLEnabled` is set to `false`.

## References

1. http://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html
2. https://tomcat.apache.org/tomcat-9.0-doc/config/http.html

## CIS Controls

**Controls Version: v8**

**Control:** 3.10 Encrypt Sensitive Data in Transit

Encrypt sensitive data in transit. Example implementations can include: Transport Layer Security (TLS) and Open Secure Shell (OpenSSH).

**IG 1:**
**IG 2:** •
**IG 3:** •

**Controls Version: v7**

**Control:** 14.4 Encrypt All Sensitive Information in Transit

Encrypt all sensitive information in transit.

**IG 1:**
**IG 2:** •
**IG 3:** •

## Profile

Level 1