Security Issue DWS

[administrator]

Because DWS has Java running, it is possible that DWS is noticed as unsafe during a security check.
To solve this you can change Java setting:

Steps are:

1) Stop DWS
2) Go to C:\Users\<account running dws>\AppData\Local\Equitrac\Equitrac Platform Component\EQDWSSrv\webserver\conf
3) Make a backup of the existing web.xml file and save this to a secure location
4) Open web.xml file in a text editor
5) Scroll down to the bottom of the file and just before </web-app> paste the following


<security-constraint>
<web-resource-collection>
<web-resource-name>restricted methods</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>PUT</http-method>
<http-method>DELETE</http-method>
<http-method>OPTIONS</http-method>
<http-method>TRACE</http-method>
</web-resource-collection>
<auth-constraint />
</security-constraint>

6) So the bottom of the file will look like


<welcome-file-list>
<welcome-file>index.html</welcome-file>
<welcome-file>index.htm</welcome-file>
<welcome-file>index.jsp</welcome-file>
</welcome-file-list>

<security-constraint>
<web-resource-collection>
<web-resource-name>restricted methods</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>PUT</http-method>
<http-method>DELETE</http-method>
<http-method>OPTIONS</http-method>
<http-method>TRACE</http-method>
</web-resource-collection>
<auth-constraint />
</security-constraint>

</web-app>

7) Start DWS
8) Login to MFP

NOTE - Please revert this change to apply future DWS hot fixes and then apply it again after the hot fix.