Security > Administrator
The settings provided here focus on securing the ColdFusion Administrator application to prevent unauthorized access. We recommend some changes from the default settings.
Enable Separate user name and password authentication (allows multiple users). This allows more granular control of what certain users can access within the ColdFusion Administrator. Use a separate username for each person that will have access to this system (see User Manager).
Provide a random string for Password Seed. We recommend using a password generation tool to create a long (200+ character) string. ColdFusion will use this string to create the encryption key which is used for a variety of security services.
Disable Allow concurrent login sessions for ColdFusion Administrator. This prevents the same user account from being used to login to the ColdFusion Administrator concurrently.
Tip: Be sure to review your ColdFusion security recommendations to help secure your server.
Security > Administrator
ColdFusion Administrator Authentication
You should restrict access to the ColdFusion Administrator to trusted users. By default the ColdFusion Administrator requires authentication to access these pages. However, if you configure your web server to restrict access to these pages, you can disable authentication and rely on your web server's implementation. Please review the installation and configuration documentation for details on disabling this.
Root Administrator Password
To change the ColdFusion Administrator password for the root administrator user, enter old password, new password and then confirm it.
Password Seed
Information about password seed...
Concurrent Login Session
Additional Help
Stuck?
Convective can help solve even the toughest ColdFusion issues. We've been doing it for over 20 years. Find out more.