---
title: Remove or protect development and debug tools
description: Before you deploy IDM in production, remove or protect development and debug tools, including the Felix web console that is exposed under /system/console. Authentication for this console is not integrated with authentication for IDM.
component: pingidm
version: 7.2
page_id: pingidm:security-guide:security-remove-dev-tools
canonical_url: https://docs.pingidentity.com/pingidm/7.2/security-guide/security-remove-dev-tools.html
section_ids:
  remove_the_felix_web_console: Remove the Felix web console
  protect_the_felix_web_console: Protect the Felix web console
---

# Remove or protect development and debug tools

Before you deploy IDM in production, remove or protect development and debug tools, including the Felix web console that is exposed under `/system/console`. Authentication for this console is not integrated with authentication for IDM.

## Remove the Felix web console

1. Remove the web console bundle and all related plugin bundles:

   ```bash
   rm /path/to/openidm/bundle/org.apache.felix.webconsole*.jar
   rm /path/to/openidm/bundle/openidm-felix-webconsole-7.2.0-SNAPSHOT.jar
   ```

2. Remove the `felix.webconsole.json` configuration file from your project's `conf/` directory:

   ```bash
   rm /path/to/project-dir/conf/felix.webconsole.json
   ```

## Protect the Felix web console

To protect access to the Felix web console, change the credentials in your project's `conf/felix.webconsole.json` file. These properties can be set using [property substitution](../setup-guide/chap-configuration.html#using-property-substitution). This file contains the username and password to access the console, by default:

```json
{
  "username" : "&{openidm.felix.webconsole.username|admin}",
  "password" : "&{openidm.felix.webconsole.password|admin}"
}
```