portal entry

Hello, Where do I download CF2018 Server Auto-Lockdown installer to be able to run that? Thanks in advance, Carl.

Comment by Carl Meyer

Good question, Carl. I don't find it (currently) offered on the page shown upon downloading CF (as was the case with the pmt), nor is it linked to from the docs page above, nor on the "downloads" page (https://www.adobe.com/support/coldfusion/downloads.html).

Comment by Charlie Arehart

We are aware of this. It will be available soon.

Comment by RAHUL UPADHYAY

Charlie, Here you go: https://www.adobe.com/support/coldfusion/downloads.html#cf2018ldg

Comment by Saurav Ghosh

Carl, Here it is: https://www.adobe.com/support/coldfusion/downloads.html#cf2018ldg

Comment by Saurav Ghosh

Thanks.

Comment by Charlie Arehart

How does this work when you are running multiple instances using the Enterprise Edition? Do you need to run the lock-down tool for each instance/site?

Comment by Michael Brown

I have a brand new Windows server and after installing ColdFusion successfully ran the auto lock down tool.  It seems to have failed attempting to change the logon user for the Windows CF services that I did not install.  They are optional services, why does it fail? Excerpt from the log file: 2019-03-28 12:22:24 INFO  - Changing logon users for ColdFusion services 2019-03-28 12:22:24 INFO  - Trying to change logon user for ColdFusion 2019-03-28 12:22:25 INFO  - Changing for: ColdFusion2018Add-onServices 2019-03-28 12:22:25 INFO  - [SC] OpenService FAILED 1060: The specified service does not exist as an installed service. 2019-03-28 12:22:25 INFO  - Changing for: ColdFusion 2018 Application Server 2019-03-28 12:22:26 INFO  - [SC] ChangeServiceConfig SUCCESS 2019-03-28 12:22:26 INFO  - Changing for: ColdFusion 2018 ODBC Agent 2019-03-28 12:22:26 INFO  - [SC] OpenService FAILED 1060: The specified service does not exist as an installed service. 2019-03-28 12:22:26 INFO  - Changing for: ColdFusion 2018 ODBC Server 2019-03-28 12:22:26 INFO  - [SC] OpenService FAILED 1060: The specified service does not exist as an installed service. 2019-03-28 12:22:26 INFO  - Failed to change the logon users for ColdFusion services! 2019-03-28 12:22:26 INFO  - Rolling back the changes because of the Lockdown failure 2019-03-28 12:22:26 INFO  - Reverting back the registry permissions changed during Lockdown

Comment by Miguel Fernandez

Just an FYI to anyone wanting to use this. If you plan to add a site on a locked down instance you will need to uninstall as your new site will not accessible. Going thru the motions now ....

Comment by Giancarlo Gomez

Hi Miguel, I am experiencing the same issue. The lockdown is bailing out after it finds that I did not install the optional services. My log is identical to yours. Very frustrating!

Comment by philg15796544

<p>Folks finding this post in mid-2019 and beyond should note that in the technotes for CF2018 update 4 (from June 2019) there is indication that the Lockdown tool installer was “refreshed” (a new one was made available). See <a href="https://helpx.adobe.com/coldfusion/kb/coldfusion-2018-update-4.html" rel="nofollow">https://helpx.adobe.com/coldfusion/kb/coldfusion-2018-update-4.html</a>.</p><p>As for getting the new installer, see the CF downloads page, specifically this anchor:</p><p><a href="https://www.adobe.com/support/coldfusion/downloads.html#cf2018ldg" rel="nofollow">https://www.adobe.com/support/coldfusion/downloads.html#cf2018ldg</a></p><p>Note that there are now Lockdown installers for Windows, Linux, and Mac. The Mac version was added in CF2018 Update 2. The checksums for the current versions are offered on that page.</p><p>I will add for those on Windows that you can confirm the version you have by looking at the properties of the file (in Windows), and its “details” page, where the new one (from update 4) reports 2018.0.2, while the original reports 2018.0.0. (The UI for the tool does NOT report its version that I have seen.)</p><p>Finally, I have not found any documentation on what changed with the tool as of CF2018 update 4, but I have just asked Adobe and am awaiting a reply. If I don’t think to add here what I hear back, I should see eventually if someone adds a comment asking me about it.</p><p>Anyway, the main point I wanted to make was that the tool was indeed updated in June 2019, so perhaps some of the warts and challenges people have had have been addressed. It would certainly seem wise for anyone preparing to use it to make sure they DO have the latest. So many people often re-use files downloaded a year or more ago, not realizing there was indeed an update.</p>

Comment by Charlie Arehart

How long does this install take.  I have IIS with 4 sites and it has been at Change permissions of IIS Website 100% for half an hour?  Task manager shows no cpu activity.

Comment by nickj24525839