Security

The Wrapper provides several features to run your application securely. Please read the following pages to learn how to use these features and implement security best practices.

• Restrict access rights to sensitive files

• Obfuscate your passwords in the configuration file:

  • Wrapper commands to obfuscate data and generate private keys

  • Configuration properties

• Use properties to pass data to Java application securely:

  • wrapper.app.property.<n> properties

  • wrapper.app.parameter.backend property

• Run the Wrapper process using a dedicated account with restricted file permissions:

  • Use wrapper.ntservice.account on Windows

  • Use RUN_AS_USER on Unix

• Set appropriate privileges to the Wrapper and its sub-processes (Windows)

• Set access rights to your Windows Service

• Java Security Model (Deprecated)

• Use Java Modules which enforces strong encapsulation

• Use a recent version of the Wrapper