000014664 - How to increase the web session timeouts on the DPM Appliance?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000014664
Applies ToRSA Key Manager Appliance 2.7.x
RSA Data Protection Manager Appliance 3.2.x
RSA Data Protection Manager Appliance 3.5.x
IssueHow to increase or decrease the web session timeouts in the DPM appliance for the different admin URLs
  • /KMS
  • /rkmawa
  • /appliance-console
Resolution

Note that by increasing the session timeout this has security implications.


There are 2 files to modify. Pay attention to the comments in those files when modifying the values. 


For 3.5.x appliances:


  1. Edit /opt/rsa-axm/agent/webservers/apache/conf/webagent.conf

Change the parameter cleartrust.agent.idle_timeout


  1. Edit /opt/axm/server-61/conf/keyserver.conf
Change the parameters cleartrust.keyserver.token_lifetime and cleartrust.keyserver.session_key_life

 


Once the changes are made, restart Access Manager and Apache using the following commands:


service ctrust restart
service httpd restart

 



For 2.7.x and 3.2.x appliances:


  1. Edit /opt/rsa-axm/agent-47-apache2/webservers/apache_2.0.59/conf/webagent.conf. Change the parameter cleartrust.agent.idle_timeout
  2. Edit /opt/axm/server-61/conf/keyserver.conf. Change the parameters cleartrust.keyserver.token_lifetime and cleartrust.keyserver.session_key_life

Once the changes are made, restart Access Manager and Apache using the following commands:


service ctrust restart
service httpd restart

 

NotesRead carefully the comments for each of those 3 parameters.
Example: If you want to increase the idle timeout to 2 hours, use the following settings:
 - cleartrust.agent.idle_timeout : 2 hours
 - cleartrust.keyserver.token_lifetime : 135 minutes
 - cleartrust.keyserver.session_key_life : leave as is (30 minutes)
 
Legacy Article IDa54924

Attachments

    Outcomes