Configure the System Properties List

Info: Available in Bloomreach Content 17.1.0 and later.

Overview

You can control which JVM system properties are visible in the CMS Admin System Properties panel. Use this configuration to hide specific properties from the CMS Admin interface.

When to Use

Configure the hidden system properties list to prevent sensitive or irrelevant JVM properties from appearing in the CMS Admin UI. Typical use cases include hiding database credentials, internal file paths, API keys, or any property that should not be visible to administrators with access to the System Properties panel.

Background

The System Properties panel in the CMS Admin perspective (Admin > System Properties) displays all JVM system properties as key-value pairs in a sortable table. By default, all properties are shown.

Starting with version 17.1, you can define a list of properties to exclude from this display. This exclusion affects only the CMS Admin UI. The properties remain active in the JVM and are accessible through System.getProperty(). Only their visibility in the UI is suppressed.

Hidden List Configuration

Configure the hidden properties list in the content repository at:

/hippo:configuration/hippo:frontend/cms/cms-static/systemprops/hidden.properties

Add each JVM system property key you want to hide as a string value. Keys are case-sensitive and must match the exact property name. If a property listed does not exist in the JVM, it is ignored without error.

Default Configuration

By default, the hidden.properties property is empty. All system properties are displayed in the CMS Admin panel.

Example Configuration

After adding custom values in a local environment and exporting repository changes, the YAML configuration appears as follows:

/hippo:configuration/hippo:frontend/cms/cms-static/systemprops:
  hidden.properties: [java.class.path, sun.java.command, com.example.db.password]
copy

Use this YAML to distribute the configuration across environments. You can also update the values at runtime using the console app if you have access.