Adobe® ColdFusion® 10 Server Lockdown Guide

Section 2: Installation Prerequisites
Before running the ColdFusion 10 installer follow the steps in this section to prepare your Web Server for
installation.
2.1 Prerequisites for all ColdFusion installations
Create a separate partition / drive for ColdFusion Installation and website assets. This mitigates the
successfulness of path traversal attacks.
Install the latest security patches for your Operating System
Install the latest security patches for your Web Server Software
Configure your Firewall to block all non-administrative traffic to the server during installation.
Download ColdFusion 10 from Adobe.com
Verify that the MD5 checksum of the downloaded file matches the MD5 specified on the Adobe.com download page.
On Mac OSX:
To obtain the MD5 checksum of a file on Mac OSX launch Terminal.app and type: md5 filename
On Linux:
To obtain the MD5 checksum of a file on RedHat Enterprise Linux open a shell and type: md5sum filename
On Windows:
Windows installations do not include a MD5 checksum verifier by default. Microsoft provides a free MD5 checksum verifier called
sigcheck.exe as part of SysInternals toolkit. Download the utility, open the command prompt and type sigcheck -h
filename. The sigcheck utility not only generates a MD5 sum, it also verifies the signature of the ColdFusion installation
executable (you should see Verified: Signed in the program output).
2.2 Prerequisites for a Windows 2008 Server Installation
Read the Microsoft Windows Security Compliance Management Toolkit (see Appendix A.1)
Run Windows Update to ensure all software is up to date
3