Skip to Main Content
Spotfire Ideas Portal
Status To be Reviewed
Product Spotfire
Created by Guest
Created on Dec 4, 2025

add capability to reload new TLS certificate for HTTPS

As per below, TLS certificate lifetime will be shorten to 47 days eventually in the near future.

https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days


To reduce the impact by this as much as possible,

we want to configure Spotfire Server to reload the new TLS certificate (replacing existing pfx file placed under <tomcat>\certs) without a service restart.


This can be done by adding a listener to server.xml.

"C:\spotfire\spotfireserver\14.6.0\tomcat\conf\server.xml"


<Server port="9005" shutdown="SHUTDOWN">

<Listener className="com.spotfire.server.tomcat.StartupCheckListener" />
<Listener className="org.apache.catalina.security.TLSCertificateReloadListener" checkPeriod="86400" daysBefore="14" />

Please add this (or better solution) to the product OOTB so end users don't have do it by themselves.


  • Attach files