We're not using the Performance Monitoring Toolset, and at least for now, don't plan to, but it's already installed, I think, maybe (I didn't do the install). Rather than go through the risk and effort of having it there but locking it down, I wondered it we could just uninstall or disable it. The agent does show up as installed in the package manager. However, one of the first things the lockdown guide says to do is to update the PMT's jvm, at C:\ColdFusion2021PerformanceMonitoringToolset\jre, but ColdFusion2021PerformanceMonitoringToolset doesn't exist at the root of C, or next to or inside the actual CF install dir. Does that mean it's not actually installed, and I don't need to think about this further?

Maybe a better question for #adobe where the CF team can answer? My assumption is that the docs are talking about PMT as a standalone install rather than as a package inside the main CF install (and in that latter case I would expect PMT to use the CF install's JRE but that might be a naïve expectation, knowing Adobe...).