000034554 - How to increase the RSA Authentication Agent for Web for IIS idle time-out from the default five minutes

Document created by RSA Customer Support Employee on Dec 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000034554
Applies ToRSA Product Set: SecurID
RSA Product/Service Type:  RSA Authentication Agent for Web for IIS
RSA Version/Condition: 7.1.4 build 229 or later, 7.1.4[229]
IssueHow to increase the web agent timeout because users are asked to re-authenticate with their RSA tokencode every five to ten minutes.
Tasks1. Create new Windows environment variable called ACE_AUTH_TIME_LIMIT.
2. Set the value of this variable to the desired idle timeout greater than the default five minutes.
ResolutionTo create a new Windows environment variable called ACE_AUTH_TIME_LIMIT on the Windows 2012 server running the agent,
  1. Open the Group Policy Management Console.  
  2. Right-click the Group Policy object (GPO) that should contain the new preference item and click Edit.
  3. In the console tree under Computer Configuration or User Configuration, expand the Preferences folder, then expand the Windows Settings folder.
  4. Right-click the Environment node, point to New and select Environment Variable.
  5. In the New Environment Variable Properties dialog box, select an Action for Group Policy to perform
  6. Create an environment variable named ACE_AUTH_TIME_LIMIT and set the value to 10 for a 10 minute idle time-out, 15 for 15 minutes, etc.
  7. Click the Common tab, configure any options, and then type your comments in the Description box.  
  8. When done, click OK. The new preference item appears in the details pane.
  1. There are other ways to create environment variables in Windows, including right clicking properties on the Windows Computer icon or accessing the Windows Control Panel and selecting System and Security > System.
Environment Variables


  1. Go to the Advanced tab and click the Environment Variables button.
  2. Under System Variables, click New to add a new system variable named ACE_AUTH_TIME_LIMIT with desired variable value.
  3. When done, click OK to exit.