Give a Tomcat Windows Service Its Proxy Settings

tomcat9w.exe //ES//MyTomcat

For Tomcat 9's Windows service named MyTomcat, this opens its documented configuration editor. Use the real service name and matching installation tool. In Java options, preserve existing entries and add those used by the application's HTTP stack:

-Dhttp.proxyHost=proxy.example
-Dhttp.proxyPort=8080
-Dhttps.proxyHost=proxy.example
-Dhttps.proxyPort=8080

Use a hostname without a URL scheme. For a permitted public HTTP test without proxy credentials, a candidate from the HTTP proxy list can supply the host and port; keep any required service-network route separate. HTTP and HTTPS properties select their destination protocols. If direct exceptions are required, use the intended http.nonProxyHosts policy; the JDK HTTPS handler shares that property.

Apply the service change and restart during an appropriate maintenance window. These are startup properties of the new JVM; in particular java.net.useSystemProxies is checked at startup. An interactive shell export does not demonstrate the service received it.

Then assess the worker's account and client. System discovery and integrated authentication can differ from the administrator's browser session. JVM properties affect only code consulting them; another library may need its builder or route planner. For 407, configure that client's supported proxy authentication rather than adding arbitrary proxyUser/proxyPassword properties.