OpenClinica strongly recommends securing the Tomcat application server using a Secure Socket Layer protocol (SSL). SSL is a data transport encryption technology used to make secure https:// connections. SSL requires a third-party security certificate to be effective. Information about configuring SSL certificates for Tomcat is at this website: http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html.