I’ve done this by changing the server.xml. You can look for the line pointing to a java key store. I’ve pointed this to a PFX file instead in the same folder and changed the PW to my PFX password. Restart tomcat and all is good. Can provide more details if needed.