# Mitigation steps for IAM

Started via the startup script (Windows or Linux)

1. Locate the file:
   * Linux: <MDM-Home>/apache-tomcat/bin/ setenv.sh
   * Windows: <MDM-Home>/apache-tomcat/bin/ setenv.bat
   * -Dlog4j2.formatMsgNoLookups=true
   * The screenshot below is given as an example: ![](https://help.qlik.com/talend/en-US/cve/Content/Resources/Log4j2_Disclosure/image6.png)
2. Locate the line starting with “CATALINA\_OPTS=…”
3. At the end of this line, add the string:
4. Restart IAM