| Check |
Considerations |
Comments / Actions |
| Do you need the geometrixx website? |
|
If not needed Geometrixx can be removed. |
| Do you need all the modules that are installed as standard? |
|
If not needed these can be removed. |
Is the root mapping correct?
The default root mappings are:
author:
/libs/wcm/content/projects.html
publish:
/content |
On author this can be used to select the touch-optimized or classic UI. |
If necessary update these as required. See CQ Root Mapping.
|
| Do you need the Apache Sling Java Script Handler to be in development mode? |
When activated a check is made for modifications every time a Java script is accessed. |
If not this can be deactivated.
See the Development Mode parameter for the Apache Sling Java Script Handler. |
| Do you need the Apache Sling JSP Script Handler to be in development mode? |
When activated a check is made for modifications every time a JSP script is accessed.
When deactivated a JSP script is compiled once and no checks are made for modifications.
|
If not this can be deactivated.
See the Development Mode parameter for the Apache Sling JSP Script Handler. |
| Configuration of the replication agents. |
Standard agents are included, but you will need to check whether these are suitable for your instance. |
See Replication Agents. |
| Default accounts and passwords need to be changed. |
Security Checklist
|
See Change Default Passwords. |
| WebDAV should be disabled. |
Security Checklist
|
See Disable WebDAV. |
| Access via the Dispatcher should be restricted to the minimum necessary. |
Security Checklist
|
See Restrict Access via the Dispatcher. |
| Cross-scripting |
Security Checklist
|
See Check for Cross-Site Scripting (XSS). |
| Dispatcher is enabled and correctly configured for caching. |
|
See Dispatcher. |
| Do you want to configure a cluster? |
|
See Configuring Clusters. |
| Will you be using LDAP? |
|
See Configuring LDAP. |
Will you need to repeat the installation and configuration?
For example, during development and testing, or over multiple servers? |
Configurations can be made in the repository and exported as packages.
However, two configurations are not saved in the repository, therefore the configuration files should be saved. |
Explicitly save your OSGi configurations in the repository, then create a package for transfer to a new instance.
Or take a copy of the appropriate configuration files. |
| Performance Considerations |
|
Performance Optimization. |
| Expiration on static objects has been properly configured. |
|
See Expiration of Static Objects.
|
| Versioning has been configured as required on author and publish. |
Space and performance. |
See Configuring Version Purging. |
| Log level has been set to ERROR on all production systems. |
You need to be informed of any errors the system might be generating.
You also need to ensure that the level is not DEBUG as this will impact space and performance. |
See Logging.
|
| The number of open files in the java process is being monitored; adjust the limit to the current needs + 100%. |
|
See Open Files in the Java Process. |
| If using TarPM, the settings have been optimized. |
Space and performance. |
See Configuring the TarPM. |
| Verbose garbage collection is enabled; logs are retained for a defined period of time and easily accessible. |
Space and performance. |
See Running Garbage Collection. |
| Java and system dumps are retained and accessible. |
In the case of problems you will need such information to help analyze the situation. |
See creating Java Heap Dumps on out of memory errors.
See your operating system for documentation about generating core dumps to file.
|
Note: Customers with DayCare user accounts need to create a new account for use on day.com.