Over the years, there have been several questions relating to the proper tuning of Certificate Systems to achieve the best performance, scalability, security, etc.

This is a complex topic which encompasses several of the following:

• Java tuning procedures (specific to JVM (e. g.- OpenJDK), JVM version, and JVM size (e. g. - 64-bit))
• Tomcat tuning procedures (specific to Tomcat version)
• Certificate System tuning procedures (may be specific to each PKI subsystem)
• Directory Server tuning procedures (should reference any existing information related to DS as used by CS)

Information explaining how to achieve these will necessarily always be a work-in-progress, but this ticket has been filed to establish a Wiki that encapsulates and describes as much of this information as possible, and provides a base for future information.

proposed Milestone: Future