diff --git a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementSecurityAutoConfiguration.java b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementSecurityAutoConfiguration.java
index f57bb8ac54..81e0720790 100644
--- a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementSecurityAutoConfiguration.java
+++ b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementSecurityAutoConfiguration.java
@@ -122,7 +122,7 @@ public class ManagementSecurityAutoConfiguration {
 		@Autowired
 		private SecurityProperties security;
 
-		@Autowired
+		@Autowired(required = false)
 		private ServerProperties server;
 
 		@Override
@@ -148,8 +148,10 @@ public class ManagementSecurityAutoConfiguration {
 			if (this.errorController != null) {
 				ignored.add(normalizePath(this.errorController.getErrorPath()));
 			}
-			String[] paths = this.server.getPathsArray(ignored);
-			ignoring.antMatchers(paths);
+			if (this.server != null) {
+				String[] paths = this.server.getPathsArray(ignored);
+				ignoring.antMatchers(paths);
+			}
 		}
 
 		private String normalizePath(String errorPath) {
diff --git a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementServerPropertiesAutoConfiguration.java b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementServerPropertiesAutoConfiguration.java
index 2663608ba4..4c5b751301 100644
--- a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementServerPropertiesAutoConfiguration.java
+++ b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/autoconfigure/ManagementServerPropertiesAutoConfiguration.java
@@ -20,6 +20,7 @@ import org.springframework.boot.autoconfigure.AutoConfigureAfter;
 import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnClass;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnWebApplication;
 import org.springframework.boot.autoconfigure.security.SecurityProperties;
 import org.springframework.boot.autoconfigure.web.ServerProperties;
 import org.springframework.boot.autoconfigure.web.ServerPropertiesAutoConfiguration;
@@ -55,6 +56,7 @@ public class ManagementServerPropertiesAutoConfiguration {
 	// In case server auto configuration hasn't been included
 	@Bean
 	@ConditionalOnMissingBean
+	@ConditionalOnWebApplication
 	public ServerProperties serverProperties() {
 		return new ServerProperties();
 	}
diff --git a/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java b/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java
index 930d245d6f..176313650a 100644
--- a/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java
+++ b/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java
@@ -316,6 +316,7 @@ public class ServerProperties implements EmbeddedServletContainerCustomizer {
 					public void customize(Connector connector) {
 						ProtocolHandler handler = connector.getProtocolHandler();
 						if (handler instanceof AbstractProtocol) {
+							@SuppressWarnings("rawtypes")
 							AbstractProtocol protocol = (AbstractProtocol) handler;
 							protocol.setMaxThreads(Tomcat.this.maxThreads);
 						}
@@ -329,6 +330,7 @@ public class ServerProperties implements EmbeddedServletContainerCustomizer {
 					public void customize(Connector connector) {
 						ProtocolHandler handler = connector.getProtocolHandler();
 						if (handler instanceof AbstractHttp11Protocol) {
+							@SuppressWarnings("rawtypes")
 							AbstractHttp11Protocol protocol = (AbstractHttp11Protocol) handler;
 							protocol.setMaxHttpHeaderSize(Tomcat.this.maxHttpHeaderSize);
 						}