Configuring the security cache

You can configure the security cache by specifying a value for the cacheTimeout property for an independent integration server by updating the server.conf.yaml configuration file or, for on an integration node, by using the mqsichangeproperties command.

About this task

To improve performance, the security manager uses a security cache. Entries are created in the security cache when a message flow with a security profile performs authentication, mapping, or authorization. The entries are valid for the length of time that is specified by the cacheTimeout property of the SecurityCache component after which the entries are marked as expired.

Procedure

  • For an independent integration server:
    1. Open the configuration file for your integration server (server.conf.yaml) by using a YAML editor.

      You can edit the file by using the built-in YAML editor that is provided in the IBM® App Connect Enterprise Toolkit, either by double-clicking the file in the Application Development view or by right-clicking the file and selecting Open with > YAML editor. If you choose to edit the file by using a plain text editor, ensure that you do not include any tab characters (which are not valid in YAML) and use a YAML validation tool to validate the contents of your file.

      For more information about configuring an integration server, see Configuring an integration server by modifying the server.conf.yaml file.

    2. Set the security cache timeout property, cacheTimeout, in the SecurityCache section of the server.conf.yaml configuration file.
      The default value is 60 seconds.
    3. When you have modified and saved the server.conf.yaml file, restart the integration server for the changes to take effect.
      For information about how to start an integration server, see Starting an integration server.
  • For an integration node:
    1. Use the mqsichangeproperties command.
      For example, to change the value of the security cache timeout parameter, cacheTimeout, to 200 seconds, use the following command:
      mqsichangeproperties INODE -b SecurityCache -n cacheTimeout -v 200 
    2. Restart the integration node for the change to take effect.