• Edit the C:\Program Files\Apache Software Foundation\Tomcat 8.5\conf\server.xml file and add the secretRequired="false" option to the AJP/1.3 connector.

• Save the file and then restart the Apache Tomcat Service.

• Edit the C:\Program Files\Apache Software Foundation\Tomcat 8.5\conf\server.xml file and add the allowedRequestAttributesPattern=".*" option to the AJP/1.3 connector.

• Save the file and then restart the Apache Tomcat Service.

1. Install the Web Server Role (If it is not already installed). The Web Server role must be installed on the FootPrints Service Core server. In addition to the Web Server role, the following sub-components of the Web Server role must also be installed:
   • CGI
   • ISAPI Extensions
   • ISAPI Filters
   • Windows Authentication

2. Download the IIS Tomcat connector (isapi_redirect.dll) from here. Make sure to download the most current and correct version for your operating system. For example, if you are installing on a 64-bit Windows system, download the 64-bit connector dll (tomcat-connectors-1.2.40-windows-x86_64-iis.zip or version newer than 1.2.40 if available).
3. Create a folder on the application server and named isapi. For example:

4. Copy the isapi_redirect.dll file to the isapi folder.

5. Create a text file in the isapi folder named:(change the text file to PROPERTIES file type)

6. Add the following text to the workers.properties file:

worker.list=servicecore
worker.servicecore.host=localhost
worker.servicecore.port=8009
worker.servicecore.type=ajp13
worker.servicecore.max_packet_size=65536

7. Save and close the workers.properties file.
8. Create a text file in the isapi folder named:(change the text file to PROPERTIES file type)

9. Add the following text to the uriworkermap.properties file:

/footprints/servicedesk/*=servicecore

10. Save and close the uriworkermap.properties file.
11. Create a text file in the isapi folder named: (change the text file to PROPERTIES file type)

12. Add the following text to the isapi_redirect.properties file:

extension_uri=/footprints/servicedesk/isapi_redirect.dll
log_file=$(JKISAPI_PATH)\..\logs\$(JKISAPI_NAME).log
log_level=info
worker_file=C:\isapi\workers.properties
worker_mount_file=C:\isapi\uriworkermap.properties

13. Save and close the isapi_redirect.properties file.
14. Start the Internet Information Services (IIS) Manager.
15. Select the Server node (The root node which represents the web server).
16. Open the "ISAPI and CGI Restrictions" feature.
17. Add a new Restriction.
18. In the "ISAPI or CGI path" field, browse to and select the isapi_redirect.dll file from the isapi folder.
19. Enter "Service Core" in the "Description" field.
20. Check the "Allow extension path to execute" box.
21. Save and close the "Add ISAPI of CGI Restriction" dialog.
22. Select the "Default Web Site" (or the web site you want to use for FootPrints Service Core).
23. Open the "ISAPI Filters" feature.
24. Add a new ISAPI Filter.
25. In the "Filter name" field enter "Service Core".
26. In the "Executable" field, browse to and select the isapi_redirect.dll from the isapi folder.
27. Save and close the "Add ISAPI Filter" dialog.
28. Select the "Default Web Site" (or the web site you want to use for FootPrints Service Core).
29. Open the "Handler Mappings" feature.
30. Click the "Edit Feature Permissions" link in the "Actions" panel.
31. Check the "Read", "Script" and "Execute" boxes.
32. Save and close the "Edit Feature Permissions" dialog.
33. Create the IIS virtual directory. NOTE:: The IIS virtual directory path must match the path of FootPrints Service Core on the Tomcat server. These instructions assume the default paths were used (footprints/servicedesk). If a different path was used, create the virtual directories to match the path on the Tomcat server. Failure to use the same path may results in IIS error "403 Forbidden".
    1. Right click the "Default Web Site" and select "Add Virtual Directory?".
    2. Enter "footprints" in the "Alias" field.
    3. In the "Physical Path" field, browse to and select the isapi folder.
    4. Save and close the "Add Virtual Directory" dialog.
    5. Select the newly created virtual directory named "footprints".
    6. Right click the "footprints" virtual directory and select "Add Virtual Directory".
    7. Enter "servicedesk" in the "Alias" field.
    8. In the "Physical Path" field, browse to and select the isapi folder.
    9. Save and close the "Add Virtual Directory" dialog.
34. Select the "servicedesk" virtual directory.
35. Open the "Handler Mappings" feature.
36. Click the "Edit Feature Permissions" link in the "Actions" panel.
37. Check the "Read", "Script" and "Execute" boxes.
38. Save and close the "Edit Feature Permissions" dialog.
39. Select the "servicedesk" virtual directory.
40. Open the "Default Document" feature.
41. Click the "Enable" link in the "Actions" panel. NOTE: If there is only a "Disable" link, the feature is already enabled. Your Tomcat/IIS integration is now complete. If Tomcat and IIS have been integrated for the purpose of using Web Server Authentication, advance to the NEXT step. If not using Web Server Authentication, then skip ahead to step 48 (restart Tomcat).
42. Select the "servicedesk" virtual directory.
43. Open the "Authentication" feature.
44. Select "Anonymous Authentication" and click the "Disable" link in the "Actions" panel.
45. Select "Windows Authentication" and click the "Enable" link in the "Actions" panel.
46. Select the "Default Web Site".
47. Open the "Request Filtering" module from feature panel.
48. Click on "Edit Feature Settings…" link in the Actions panel to the right.
49. Change the value of “Maximum URL length” and “Maximum query string” to be "65536" and click OK.
50. Open server.xml in your Tomcat installation folder. For example: C:\Program Files\Apache Software Foundation\Tomcat 7.0\conf\server.xml, or C:\Program Files\Apache Software Foundation\Tomcat 8.5\conf\server.xml
51. Replace the following lines:

    <!-- Define an AJP 1.3 Connector on port 8009 -->
        <Connector port="8009" protocol="AJP/1.3" redirectPort="8443"/>

    with:

    <!-- Define an AJP 1.3 Connector on port 8009 -->
        
     <Connector port="8009" protocol="AJP/1.3" secretRequired="false" packetSize="65536" tomcatAuthentication="false" URIEncoding="UTF-8" allowedRequestAttributesPattern=".*"/>

    WARNING! Please copy the line exactly as it is shown. The new attribute (tomcatAuthentication) is case sensitive so it is important that it matches exactly or it will not work.
52. Restart Tomcat.
53. Restart IIS:
    1. Right click the Server node (The root node which represents the web server)
    2. Select "Stop".
    3. Right click the Server node (The root node which represents the web server).
    4. Select "Start"
54. IIS is now configured to forward all FootPrints Service Core requests to the Tomcat server. You can test this by browsing to http://localhost/footprints/servicedesk (or http://FPservername/footprints/servicedesk if accessing from a client computer) on the FootPrints Service Core application server.

If it is desired to enable Web Server Authentication, see the article for enabling Web Server Authentication in FootPrints Service Core 12.

Troubleshooting:

When using IIS Redirect to support Footprints Web Server Authentication and using HTTPS/SSL in IIS, you can get an error using Footprints Scheduled reports.  Please see this article:
Footprints 12 Auto-Run Report Errors

If you miss the steps to update the Apache Tomcat server.xml file, you can get the error described in this article.
FPSC 12 - Message: Header message of length [65,532] received but the packetSize is only [8,192]

If there are problems uploading files larger then 30MB, you will have to follow the directions below to change the settings in IIS 7 or IIS 8.
"Invalid response - Unable to decode server's response to JSON" error occurs when attempting to upload attachment larger than 30MB

Did you install FootPrints 12.XX - 20.XX using a different url then /footprints/servicedesk?
Change all of the instructions to use the different URL in creating the ISAPI redirect and IIS configuration, per the note instructions.

Upgrade tomcat from 7 to 8.5:
https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?sfdcid=000164588

to add to the tomcat upgrade process, please note below point if you using IIS integration :
In order to process passthrough authentication, the NTFS file permissions on isapi_redirect.dll must allow the groups "IIS_IUSRS" and and "Authenticated Users" Read/Execute permissions.  Because Tomcat 7.0 and Tomcat 8.5 install to different directory paths, the permissions will not be inherited from the previous installation.

NOTE:
Performance may be slower when integrating IIS as additional "hops" have to be performed via the third party application IIS.

NOTE:
These are the instructions to configure IIS integration with FootPrints. 
Any changes in IIS that deviates from these has a possibility of breaking the integration.