---
schema_version: "1"
id: 035ab1bee0c49b9e2006c91876e5f70e84de2c022bed4fc35c62022b97a2cd71
title: Hardening Mule Runtime on Runtime Fabric
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/runtime-fabric/2.11/configure-hardening.md
canonical_url: https://docs.mulesoft.com/runtime-fabric/2.11/configure-hardening
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 51e2cd2881e1053691b51eb86551a1c97fe26eefa53154c02a1347c54cac6f2a
description: MuleSoft Documentation Site
release: "2.11"
latest: false
---
---
product: Runtime Fabric
version: 2.11
---

# Hardening Mule Runtime on Runtime Fabric

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

By design, Runtime Fabric automatically applies and enables hardening measures for your Mule
applications. By following containerization best practices, isolation at the Mule and application
level is achieved by default.

The following hardening checklist provides additional information and best practices for Mule
hardening with Runtime Fabric.

## Hardening Checklist

<table><caption>Table 1. Mule Hardening Procedure</caption> <colgroup><col> <col></colgroup><thead><tr><th>Hardening Step</th><th>Action Required</th></tr></thead><tbody><tr><td><p>Run Mule as a non-privileged User.</p></td><td><p>Runtime Fabric provides this functionality.</p></td></tr><tr><td><p>Install Mule as a Service</p></td><td><p>Runtime Fabric provides this functionality by deploying a Mule runtime engine for each application within its own container.</p></td></tr><tr><td><p>Configure Mule to write logs or temporary files within appropriate locations. Configure logs, passwords, and keystore files.</p></td><td><p>Runtime Fabric provides this functionality. Mule writes to a temporary file system that is deleted when the application terminates. Monitoring information is collected from a sidecar agent in a specific location on disk where metrics are outputted and stored. Logs are collected from standard output streams.</p></td></tr><tr><td><p>In some situations, you must configure usernames, passwords, and keystores on Mule. Usually, these settings are made available externally, so that DevOps can change these settings.</p></td><td><p>Runtime Fabric provides this functionality. Refer to <a href="https://docs.mulesoft.com/runtime-fabric/2.11/manage-secure-properties">Manage Secure Properties in Runtime Fabric</a> for additional information.</p></td></tr><tr><td><p>Manage certificates in a keystore file.</p></td><td><p>This is supported on Runtime Fabric, but you must import the certificates into the keystore.</p></td></tr><tr><td><p>Use a separate property file to store usernames and passwords and secure it using file system permissions.</p></td><td><p>Runtime Fabric provides this functionality. Refer to <a href="https://docs.mulesoft.com/runtime-fabric/2.11/manage-secure-properties">Manage Secure Properties in Runtime Fabric</a> for additional information.</p></td></tr></tbody></table>