The Wrapper provides several features to run your application securely. Please read the following pages to learn how to use these features and implement security best practices.

• Restrict access rights to sensitive files

• Obfuscate your passwords in the configuration file:

  • Wrapper commands to obfuscate data and generate private keys

  • Configuration properties

• Use properties to pass data to Java application securely:

  • wrapper.app.property.<n> properties

  • wrapper.app.parameter.backend property

• Run the Wrapper process using a dedicated account with restricted file permissions:

  • Use wrapper.ntservice.account on Windows.

  • Use RUN_AS_USER on Unix.

• To reduce the risk of executing untrusted native code, limit where native libraries can be loaded from:

  • Use wrapper.java.module.<n>.enable_native_access to enable native access on a per-module basis.

  • Use wrapper.java.library.path.<n> for libraries directly loaded by Java.

  • Use wrapper.system.library.path.<n> for libraries loaded from native code.

  • Use the wrapper.java.windows.dll.search.* properties on Windows to further restrict the search locations for DLLs loaded on Windows.

• Set appropriate privileges to the Wrapper and its sub-processes (Windows)

• Set access rights to your Windows Service

• Use Java Modules which enforces strong encapsulation

• Use a recent Java version and a recent Wrapper version

• Java Security Model (with the Security Manager)