Enabling Dynamic WTP

Dynamic WTP protects your web pages while Tomcat applications are running, and can detect tampering of dynamic data, such as database data. It can be enabled with static WTP or separately.

Constraints and Limitations

Only the servers that are protected by the HSS WTP edition support the operations described in this section.

Prerequisites

You are using a server running the Linux OS.

Procedure

Log in to the management console.
Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
Choose Prevention > Web Tamper Protection, click Servers tab page and click Configure Protection in the Operation column.
On the Configure Protection tab, toggle on to enable Dynamic WTP.
In the displayed dialog box, modify the Tomcat bin Directory.
To enable dynamic WTP, you need to modify the Tomcat bin directory first. The system presets the setenv.sh script in the bin directory for setting anti-tamper program startup parameters. After enabling dynamic WTP, restart Tomcat to make this setting take effect.
Click OK to enable dynamic WTP.