Configuring SSL for HTTPS access from Web Clients

The recommended method of configuring HTTPS access to Web Clients is using the -ssl options of the Setup utility as explained in Server Installation and Configuration.
‎[{ -s | --ssl }] SSL: enable or disable ssl
‎[{ -sc | --ssl-cert-file }] SSL: the X.509 file containing the SSL certificate
‎[{ -sk | --ssl-key-file }] SSL: the X.509 file containing the SSL key
‎[{ -sp | --ssl-key-password }] SSL: the password for the SSL key file
‎[{ -sr | --ssl-root-chain-file }] SSL: the X.509 file containing the SSL certificate chain
‎For example:
‎$MM_HOME/Setup.sh -s true -sk MyPrivateKeyFile -sp MyPrivateKeyPassword

If the above method fails, you may manually update the server keystore location and password, by editing $MM_HOME/tomcat/conf/server.xml to change the value of certificateKeystoreFile and certificateKeystorePassword within the <Certificate> section.