Problem Definition

When we disable Synchrony in Confluence's instances, a couple of items associated with it are not removed or disabled, which can trigger security warnings on the client side. For example, jwt.private.key and jwt.public.key are still seen in the confluence.cfg.xml file.

Suggested Solution

Remove and/or disable features related to Synchrony if this is disabled.

Why this is important

Those Synchrony features that are still present regardless of the service being enabled can trigger security warnings.

Workaround

N/A