1. Create a self-signed server certificate using keytool . Take note of the keystore password, you will need it later on for setting up the server. keytool -genkeypair -alias tomcat -keyalg RSA -keysize 1024 -dname "CN=localhost, OU=Group, O=Company Name, L=City, S=Region, C=PH" -validity 365 -keystore keystore 2. Move the generated certificate file (keystore) to Tomcat’s conf directory. 3. Modify conf/server.xml <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="conf/keystore" keystorePass="your password" /> 4. Restart Tomcat. 5. Visit this link https://localhost:443/ . You will receive a warning about the self-signed certificate. If you want to get away with this warning, purchase a commercial certificate.