You can configure client certificate authentication. Depending on your company policy, client-side certificates qualify for 2-factor authentication. With client certificate authentication enabled, only users with a valid SSL client certificate can connect to the console.
Navigate to the directory where the configuration file server.xml is located:
<Server install root>\McAfee\Trellix Database Security\confExample:
C:\Program Files\McAfee\Trellix Database Security\confModify the SSL connector element by changing the value of the attribute clientAuth from "false" to "true".
Add the attribute truststoreFile to the SSL connector element with the value of the keystore containing trusted CA certificates, which you can use for validating client certificates. This file might be the same one used for the keystore element.
The following is a sample configuration change of the connector element in sever.xml.
<Connector port="8443" server="Trellix WebServer" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true" clientAuth="true" truststoreFile="C:\Program Files\Mcafee\Trellix Database Security\httpsKeystore\.keystore" sslProtocol="TLS" keystore="C:\Program Files\McAfee\Trellix Database Security\httpsKeystore\.keystore" />