As of December 31st, 2023 ThreadFix 2.X has reached End of Life and is no longer supported. For any further information please contact the Success and Implementation team.
Windows Enterprise Setup
You will learn
How to install and configure ThreadFix on Windows. While currently ThreadFix supports Windows 2012 R2 and newer, these instructions were developed and tested against Windows Server 2016.
Prerequisites
Audience: IT Professional and/or End User
Difficulty: Intermediate
Time needed: Approximately 60 minutes
Tools required: OpenJDK 8, latest version of OpenJDK 11 or Oracle Java 8, latest version of Tomcat 8.5, MySQL or Microsoft SQL Server
Install Java
OpenJDK 11
OpenJDK 8
Oracle Java 8
Install and Configure Tomcat 8.5
Download and Install
ThreadFix recommends the latest version of Tomcat 8.5. Note versions prior to 8.5.78 are not recommended due to security exploit CVE-2022-22965.
In order to provide enough memory to the Java process, it is important that the 64-bit versions of both Java and Tomcat are used.
Download the latest version of Tomcat 8.5 here.
Scroll down to the 8.5.x versions, and download 32-bit/64-bit Windows Service Installer under the Core link.
Run the installer and accept all defaults except at the end: disable the checkbox to run Tomcat when clicking Finish.
Web.xml Update
For compatibility with Tomcat 8.5.43 and newer, make the following update:
Open the <tomcat-deploy>\conf\web.xml file in a text editor (run as Administrator) and edit the default servlet as follows:
OLD
NEW
Configuration
Launch the Configure Tomcat application.
Select the Log On tab and change the default service logon to Local System account, if not already set (it may default to Local Service account instead). If you need to use a domain user instead, e.g., for Windows Authentication access to MS SQL Server, click Windows SQL Server Configuration for instructions.
Select the Java tab and update the following (see screenshot below):
Java Virtual Machine:
%JAVA_HOME%\bin\server\jvm.dll
Java Options:
-XX:+UseG1GC
Initial Memory Pool:
2048
Maximum Memory Pool:
8192
(or higher if wanting to allocate more memory)
Click Apply. Go back to the General tab and ensure the Service Status is Stopped; if not, click the Stop button.
Once the process stops, you may move on to database setup.
SSL/TLS Implementation
For information on configuring Tomcat to run over SSL/TLS, refer to the following article.
Install and Configure the Database
To install and configure MySQL, refer to the following page: Windows MySQL Installation and Configuration.
To install and configure Microsoft SQL Server, refer to the following page: Windows SQL Server Configuration
Install ThreadFix
To install and configure ThreadFix, refer to the following page: ThreadFix Installation.
www.threadfix.it | www.coalfire.com
Copyright © 2024 Coalfire. All rights reserved.
This Information Security Policy is CoalFire - Public: Distribution of this material is not limited.