Default security settings in Jira Service Management
This page gathers links to documentation describing default system settings for Jira Service Management as a response to the Secure Software Development Framework (SSDF) requirements.
We provide pre-configured solutions with the most secure settings as default. Our mission is to unleash the potential of every team, prioritizing security every step of the way. Jira Service Management comes with a set of default settings that provide administrators with the assurance that the product is secured immediately after installation, without requiring any additional steps.
All our Data Center products offer exceptional flexibility in terms of configuration. Many settings can be adjusted during the installation or pre-configuration process. In our commitment to strengthen security measures, we've implemented a range of default settings to mitigate the most common threats and vulnerabilities, thus reducing the risk of unintentionally exposing critical systems due to misconfiguration.
The following settings list with corresponding documentation will assist you in elevating the security level of your Jira Service Management instances. Some of the documents below contain child pages. Refer to them as well to enhance the security of your instance.
1. Deployment
This documentation covers the process of deployment and includes: supported platforms, requirements, end-of-life policies, network setup, security protocols, infrastructure configurations, and the installation and configuration of software components such as Java, Tomcat, and databases.
- サポート対象プラットフォーム
- サポート終了のお知らせ
- 重要なディレクトリとファイル
- バンドルされる Tomcat および Java バージョン
- 起動時のプロパティとオプションの設定
- SSL または HTTPS 上での Jira アプリケーションの実行
- Jira と Apache の統合
- Apache HTTP サーバーを利用して Jira アプリケーションを保護する
2. Setup
This documentation focuses on configuring Jira Service Management after deployment. It includes guides on setting up environments, configuring connection settings, managing data storage, and ensuring that all components support the instance.
- Jira アプリケーションのデータベースへの接続
- データベース パスワードを保護する
- ユーザー ディレクトリの設定
- データをバックアップする
- robots.txt を使用して検索エンジンから隠す
- Enabling and disabling data collection in Jira
- Advanced Jira configuration
- Connecting to SSL service
- Jira Service Management specific:
3. Authentication, authorization, user management, and security
This documentation relates to securing applications and managing user access. It covers authentication and authorization mechanisms, user management, permissions, and security best practices.
- Managing permissions
- セキュリティの概要および勧告
- Cluster authentication
- Single Sign-On documentation for Data Center products
- Jira Data Center アプリケーション向け SAML SSO
- Managing users
- Managing groups of users
- 課題レベルのセキュリティを設定する
- パブリック サインアップおよび CAPTCHA の有効化
- 権限の設定
- Controlling anonymous user access
- セーフガードでユーザー グループ アクティビティを抑制する
- 安全な管理者セッションの設定
- プロジェクト権限を管理する
- Jira Software を管理する
- ユーザー管理の制限と推奨事項
- ユーザー既定設定の構成
- グローバル設定
- 詳細設定の構成
- Jira Service Management specific:
4. Runtime, performance monitoring, and troubleshooting
This documentation focuses on monitoring and maintaining instances after setup. It includes guides on performance monitoring, handling runtime issues, and troubleshooting common problems.
- Storing search indexes
- Cache replication
- System logging and profiling
- Jira アクセス ログ アナライザー
- Jira の監視
- スレッド ダンプの生成
- Jira での監査
- Jira を Kubernetes クラスタで実行する
- Jira monitoring
- クラスタの監視
- サーバーの最適化
- Disaster recovery guide
5. Integrations and third-party apps
This documentation covers integrating Jira Service Management with other Atlassian products and creating and integrating third-party apps with Jira Service Management.
- Database configuration properties
- Security for building apps: