ICMSTSysControl (System control)

The ICMSTSysControl table stores system configuration parameters for the IBM® Content Manager library server.

Table 1.
Column	Data type	Attribute
LibraryServerID	INTEGER	NOT Null
LanguageCode	CHAR(3)	NOT Null
SysSegmentID	SMALLINT	NOT Null
SysSegmentThreshld	INTEGER	NOT Null
ACLBindingLevel	SMALLINT	NOT Null
LibraryACLCode	INTEGER	NOT Null
PubAccessEnabled	SMALLINT	NOT Null
DfltACLChoice	SMALLINT	NOT Null
SMSChoice	SMALLINT	NOT Null
TraceLevel	SMALLINT	NOT Null
MaxUsers	INTEGER	NOT Null
MaxUserAction	SMALLINT	NOT Null
CurrentUsers	INTEGER	NOT Null
MaxLogonRetry	SMALLINT	NOT Null
PasswordDuration	SMALLINT	180 (days)
SysAdminEventFlag	SMALLINT	NOT Null
SystemFlag	SMALLINT	NOT Null
DatabaseType	SMALLINT	NOT Null
MaxTxDuration	INTEGER	NOT Null
MaxResultSetSize	INTEGER	NOT Null
AllowTrustedLogon	SMALLINT	NOT Null
DocRoutingUpdate	INTEGER	NOT Null
DocRoutingFreq	SMALLINT	NOT Null
Platform	SMALLINT	NOT Null
SysTimeout	SMALLINT	NOT Null
TIEUserID	CHAR(32)	nullable
TIEPassword	[DB2] CHAR(72) FOR BIT DATA, [ORACLE] RAW (72)	nullable
V8.5 Fix Pack 1 or later: TIEPassword2	[DB2] VARCHAR(256) FOR BIT DATA, [ORACLE] RAW (256)	nullable
DatabaseName	VARCHAR(128)	NOT Null
DBSchemaName	VARCHAR(128)	NOT Null
TraceFileName	VARCHAR(128)	nullable
EncryptionKey	[DB2] CHAR(128) FOR BIT DATA, [ORACLE] RAW(255)	NOT Null
KeepTraceOpen	SMALLINT	NOT Null
MultipleTraceFiles	SMALLINT	NOT Null
MaxTraceFileSize	INTEGER	NOT Null
PathICMRoot	VARCHAR(128)	NOT Null
PathICMDLL	VARCHAR(128)	NOT Null
SuspendServerTime	TIMESTAMP	nullable
RMStatusInterval	SMALLINT	NOT Null
RMStatusTimeout	SMALLINT	NOT Null
TIEInterval	SMALLINT0	NOT Null
LSCurrentVersion	VARCHAR(128)	NOT Null
TraceUser	CHAR(32)	nullable
DIMsgDigestAlgo	SMALLINT	NOT Null with default 0
DIEncryptionAlgo	SMALLINT	NOT Null with default 0
SystemFlag2	INTEGER	NOT Null with default 0
RecordsManagerHost	INTEGER	NOT Null with default 0
UDFTIMEOUT	INTEGER	NOT Null with default 0
HASHKEY	[DB2] CHAR(128) FOR BIT DATA, [ORACLE] RAW(255)	NOT Null
UDFTRACEFILENAME	VARCHAR(128)	nullable
UDFTRACELEVEL	SMALLINT	NOT Null with default 0
OITOPTIONFLAG	SMALLINT	NOT Null with default 13
QUIESCEGRACEPERIOD	INTEGER	NOT Null with default -1
QUIESCEDURATION	INTEGER	NOT Null with default 0
KEYSTOREFILE	VARCHAR(259)	nullable
KEYSTORESTASHFILE	VARCHAR(259)	nullable
KEYSTORECERTLABEL	VARCHAR(128)	nullable
SYSTEMFLAG3	INTEGER	NOT Null with default 0
SYSTEMFLAG4	INTEGER	NOT Null with default 0
USAGESTATSTARTTIME	INTEGER	NOT NULL WITH DEFAULT 0
USAGESTATFREQTYPE	SMALLINT	NOT NULL WITH DEFAULT 1
USAGESTATFREQ	INTEGER	NOT NULL WITH DEFAULT 24
LICENSETYPE	SMALLINT	NOT NULL WITH DEFAULT 0
QUERYTHRESHOLD	INTEGER	NOT Null with default 0

Primary key

(LibraryServerID)

Indexes

For z/OS only:
Unique Index = (LibraryServerID ascending)

Referential constraints

Foreign Key = (LibraryACLCode)
  references ICMSTAccessCodes (ACLCODE)
    on delete restrict

Columns

LibraryServerID

User-defined library server ID during installation. The default is 1. Valid values are 1 to 99. You must maintain single rows in this table. If you have more than one library server in your enterprise, consider assigning a different value to each library server. This value is a part of item ID, and cannot be updated.

LanguageCode

The three-character language code assigned to each written language. The language codes are assigned to the written languages of the world by IBM. The language codes are documented in the IBM National Language Design Guide: National Language Support Reference Manual, Volume 2. It is an installation parameter.

Implementation: When a user is logged on to the IBM Content Manager system, if the LanguageCode is not provided, the logon SP (ICMlogon) extracts LanguageCode from System Control table (ICMSTSYSCONTROL) as a default language.

SysSegmentID

SysSegmentID of a physical system table (ICMSTITEMSnnnsss, ICMSTITEMVERnnnsss, and ICMSTLINKSnnnsss). The default is 1. Valid values are 1 to 999. If a segment size has exceeded the SysSegmentThreshld, a new segment is created and the SysSegmentID is incremented by one. Reserved for future implementation.

SysSegmentThreshld

Maximum number of rows per segment. Reserved for future implementation.

ACLBindingLevel

The access control level. Can be updated. No longer appears in the system administration client, but can be by using the API. Valid values are:

0: At Item Type level.
1: At Item level.
2: Mixed (Item & Item Type). This value is the default.
3: At entire Library level.

LibraryACLCode

This parameter contains the ACL to be associated with all IBM Content Manager item types and items if the parameter ACLBindingLevel is configured at the library level. Can be updated.

PubAccessEnabled

Controls whether the ACL rules that assign privileges to the ICMPUBLC group are used. Valid values are 1 and 0.

To use the ACL rules, set this parameter to 1.
To ignore the ACL rules, set this parameter to 0.

If you change the value of this parameter, IBM Content Manager regenerates the library server's ICMSTCOMPILEDACL table. How long this takes depends on how many ACLs there are; and how many rules, users, and privileges they contain.

The default value is 0.

DfltACLChoice

In V8.6 and later, this column is deprecated and is not used. The default ACL code. This value is only used when the ACL Binding level is either set to "item level" in the library server configuration, or "mixed level with item level" in the item type definition. Can be updated. No longer appears in the system administration client, but can be set by using the API. Valid choices are:

0: Use the ACL of the Item Type, stored in ICMSTItemTypeDefs.ItemTypeACLCode. This value is the default.
1: Use the ACL of the user profile, stored in ICMSTUsers.DfltACLCode.
2: Use the ACL of the Library, stored in ICMSTSysControl.LibraryACLCode.

SMSChoice

When a value is not provided for both the object server and the collection name, SMSChoice indicates which default values to use for these parameters when creating an item part. Valid values are:

0: Uses the defaults associated with the user for both the collection name and the resource manager.
1: Uses the defaults associated with the item type for both the collection name and the resource manager.
2: Uses the defaults associated with the item type for the collection name and defaults associated with the user for the resource manager.
3: Uses the defaults associated with the user for the collection name and defaults associated with the item type for the resource manager.

Attention: A setting of 2 or 3 requires that the system administrator define all of the combinations used as valid in the resource managers. Collection names are specific to a resource manager, and mixing them works only if you have each collection defined on all resource managers. Because IBM Content Manager does not check for this, then invalid combinations can cause in-store failures that are difficult to troubleshoot. Make sure that your system is uniform before you specify 2 or 3.

TraceLevel

The identifier that indicates what level of trace data to log in the file. This value is a bit mask. To turn on multiple trace levels, add the numbers corresponding to each bit. For example, to turn on a full trace (basic, detailed data and performance), set TraceLevel to 15; that is, 1 + 2 + 4 + 8.

Table 2. TraceLevel identifiers
Bit	TraceLevel	Description
0	1	Trace entry and exit only
1	2	Trace detail flow of the code
2	4	Trace data for variables
3	8	Trace time spent in each stored procedure
4	16	Trace LOB parameters sent between IBM Content Manager API and library server
5	32	Trace malloc and free memory
6	64	Trace data corruption for malloc memory using barrier
9	512	Trace query string and Db2 open cursor time for performance monitoring
10	1024	Trace data for queries whose open cursor time is more than the value specified in QueryThreshold
12	4096	Version 8.7.0.1 and later: LDAP trace is turned on as part of level 15. Before version 8.7.0.1: LDAP user exit trace.

IBM Content Manager performs error logging even when TraceLevel is set to 0.

For tracing general and performance problems, use 15.

MaxUsers

Limits the maximum number of concurrent users. The default is 0, which means no limit.

MaxUserAction

The action to take when the maximum number of concurrent users is reached. Valid values are:

0: Allow the logon, but return a "warning" message. (default)
1: Reject the logon.
2: Allow the logon without a warning.

CurrentUsers

When MaxUsers is set to a number other than 0, this value is an estimate of the number of users that are currently logged on. This value is incremented by ICMlogon and decremented by ICMlogoff. When ICMlogon finds that the current number of users has reached the maximum, it calls ICMCountUsers. This function will:

Update ICMSTUSERS, replacing any LASTACCESS times older than 30 minutes with 0.
SELECT COUNT for LASTACCESS != 0 to get the count of users.
Store the new count in the system control table. This approach might clean up the counts when the maximum number of concurrent users is reached.

MaxLogonRetry

The maximum number of logon failures allowed due to invalid password. For no limit, set to 0.

PasswordDuration

The number of days that a password is valid before it expires. When set to 0, the password expiration feature is disabled, which means that user passwords never expire.

SysadminEventFlag

Indicates whether the logging of SystemAdmin events is enabled. Valid values are:

1: True, enabled.
0: False, disabled. (default)

SystemFlag

Interpret the value of SystemFlag in a bitwise mode. Bit positions are counted from right to left. Counting starts with number 0, so the rightmost bit is bit number 0 and the leftmost bit is bit number 15. If a particular bit is enabled (set to 1), the corresponding function in the database is enabled.

Table 3. SystemFlag bit assignments
Bit	Description
0	When set to 1, the text search feature is enabled. It includes Db2® Net Search Extender for UDB, IBM Text Search Server for DB2® for Content Manager for z/OS®, and Oracle text search server feature enablement.
1	Reserved
2	0: (Default) 1: Perform SET CURRENT DEGREE = 'ANY' for running user query. (Only for z/OS.)
3	LDAP is enabled.
4	Administrative Domain is enabled.
5	Reserved
6	Reserved
7	Enables ACL User Exit.
8	Reserved
9	Deferred DDL Generation feature.
10	Reserved
11	Reserved
12	Reserved
13	Reserved
14	Disables the passing of the view ID for items in which links are created or removed. Also disables the passing of the view ID for deleteItem and deleteDoc. By default, this option is enabled.
15	Enables library server for IBM Records Manager. This bit cannot be disabled once it is enabled.

If all bits are 0, it means that nothing is enabled. More bits have been assigned.

DatabaseType

The type of the database. Valid values are:

0: Db2
1: ORACLE

MaxTxDuration

The limit on the duration for all explicit IBM Content Manager transactions. When set to 86400 seconds (the default), the server does not impose a limit.

MaxResultSetSize

Allows users to control the size of the result set (number of Items returned from the server). When set to 0 (default) the server does not impose a limit.

AllowTrustedLogon

Allows users to log on without a password. The AllowTrustedLogon flag is a feature controlled only by the system administration client, and must be ON to allow logon without password. The valid values are:

0: AllowTrustedLogon is not allowed. (default)
1: AllowTrustedLogon is allowed.

DocRoutingUpdate

The Linux® or AIX® time when Suspend or Notify state for Document Routing was last checked.

DocRoutingFreq

The frequency of DocRoutingUpdate. Set to 10 minutes, with no interface to change it. Primarily changed for testing purposes.

Platform

Identify the platform of the library server. Valid values are:

0: Windows
1: AIX
3: z/OS
4: Linux

SysTimeout

Reserved.

TIEUserID

The UserID must be defined in the ICMSTUSERS table and must match a DBMS user ID. IBM Content Manager uses this value for connecting to database before creating TIE index.

TIEPassword

The password of the TIEUserID.

TIEPassword2

The password of the TIEUserID.

DatabaseName

The database name of the library server. This value is an installation parameter that cannot be updated.

DBSchemaName

The database schema name of the library server. This value is an installation parameter that cannot be updated.

TraceFileName

Full name including path and file name of trace file used for the server trace and error log For example: C:\ICMSERVER.LOG. For z/OS, the default is SYSPRINT.

EncryptionKey

Use to generate object tokens which access the resources.

KeepTraceOpen

Reserved.

MultipleTraceFiles

From version 8.7.0.5, this column has a different semantic. The value N has the following meaning:

0: Circular Logging is turned off.
> 0: Circular Logging is turned on (if TRACELEVEL is not 0) and this is the number of log files before the trace file names wrapped. The file names are <basename>, <basename_1>,...<basename_N-1>. For example, for N=3: ICMSERVER.log, ICMSERVER.log_1, ICMSERVER.log-2.
Important: The Library Server monitor must be running for the circular logging feature to work.
-1: Indicates there is no maximum. The result is the suffix (_N) of the name of the log files will continue without wrapping until MAX_UINT, at which time it wraps to 1.; For usage and best practices, refer to the description of library server behavior when Circular logging is turned on.
<-1: Ignored and treated as 0.

MaxTraceFileSize

The maximum size for trace files when MULTIPLETRACEFILES is set. The minimum value is 10 MB (10*1024*1024). If the application sets it to less than 10 MB, the library server will set it to 10 MB. For usage and best practices, refer to the description of library server behavior when Circular logging is turned on.

PathICMRoot

The directory path value of ICMROOT. On Windows, Linux and AIX, the path where the library server is installed. This column does not apply to MVS.

PathICMDLL

The directory path value of ICMDLL.

Windows: This is the same as PATHICMROOT.

Linux and AIX: This is the path to be used for the DDLs and output that the DB2TIE command generates whenever errors happen. This should be under the fenced UDFs UserID associated with the Db2 instance. This column does not apply to MVS.

SuspendServerTime

The time that the system administrator requests transaction blocking for the library server and resource manager database backup. The utility pauseserver.bat (or pauseserver.sh) updates this column. The default is NULL.

The library server can be paused to stop all new transactions, and at the same time, allow transactions that are in progress to complete. After that time, any new transactions are rejected. If an application is storing an object to a resource manager, those operations are allowed to complete if they do not exceed the time specified in MAXTXDURATION in ICMSTSYSCONTROL. After that time, any request to the library server is rejected.

RMStatusInterval

The duration to wait before checking the status of the resource managers. The default is 60 seconds.

RMStatusTimeout

The duration to wait before marking a resource manager as unavailable. Then for replication, IBM Content Manager bypasses this resource manager whenever another resource manager is available. The default is 15 seconds.

TIEInterval

The duration to wait before processing the TIELOG table (only for Oracle usage). The default value is 0 seconds.

LSCurrentVersion

The current release version of the library server. For example, 8.7.00.000.

TraceUser

When TraceUser is set, trace records are written only for that UserID. This can be used to trace specific problems in a production system.

DIMsgDigestAlgo

For future use. Contains the message digest algorithm used for data integrity by the resource managers.

DIEncryptionAlgo

For future use. Contains the encryption algorithm used for data integrity by the resource managers.

SystemFlag2

The value of SystemFlag2 is interpreted in a bitwise mode. Bit positions are counted from right to left. Counting starts with number 0, so the rightmost bit is bit number 0 and the leftmost bit is bit number 31. If a particular bit is enabled (set to 1), then the corresponding function in the database is enabled. Valid values are:

Table 4. SystemFlag2 bit assignments
Bit	Description
0	Reserved
1	Reserved
2	When set to 1, any protocol less than TLS 1.3 is disabled for the library server outbound connection. When used in combination with other bits for TLS configuration, the most restrictive protocol is enforced.
3	P8 Record Manager is enabled
4	Enables performance logging for SQL Query Statement
5	Reserved
6	Reserved
7	Event Monitor is active
8	IBM Content Manager is enabled for Event Monitor
9	Reserved
10	When set to 1 and therefore enabled, the library server does not return table space information. This improves performance on sysadmin operations, if you have not moved the table to a different table space.
11	Reindex uses base view for source item type. When bit 11 is enabled, during the reindex operation the library server uses the base component view rather than the active component view for the source item type. Do not enable this bit unless IBM support advises you to do so.
12	Disables checking for active work packages. When bit 12 is turned on, the library server does not check for the existence of active work packages when it is updating the document routing process definition. When bit 12 is turned off, checking for active work packages is enabled. The default is to enabling checking for active work packages (bit 12 turned off). For more information, contact IBM Software Support.
13	1: Db2 external security is active. When Db2 external security is active, the library server will not generate GRANT statements when a user creates a new item type. The default is 0, indicating that Db2 external security is inactive. This bit is used in Content Manager for z/OS only.
14	1 regenerates the ICMSTCOMPILEDACL table in space-optimized mode. When enabled, Sysadmin displays in the library server configuration panel an indication that the library server database is operating in space-optimized ACL mode. Note however, that the time to generate the ICMSTCOMPILEDACL table is usually faster for space-optimized mode since the table is usually much smaller. But in either space or time-optimized ACL mode, there is no change in behavior from the user perspective. Users can switch back to normal mode (time-optimized) by setting the bit to 0 and rerunning `cmcfglsi –t cacl`. For z/OS, run the ICMMCACL job to rebuild the tables instead of `cmcfglsi –t cacl`. All clients must log off before switching modes.
15	The bit can be set to 1 avoid lock contention on the ICMSTUSERS table in systems where many connections use the same user ID. However, if it is set to 1, the ICMSTUSERS table is not updated during ICMLOGON and ICMLOGOFF in the library server, so the following values will not be accurate: indication of whether the user is logged on (LOGGEDON in the ICMSTUSERS table) the number of current users, and checking for maximum of current users (CURRENTUSERS in the ICMSTSYSCONTROL table) when a user last used a stored procedure (LASTACCESS in the ICMSTUSERS table) when a user last logged on (LASTLOGON in the ICMSTUSERS table). The default for this bit is off; this means that the library server updates the ICMSTUSERS table during ICMLOGON and ICMLOGOFF.
16	Reserved.
17	When set to 1, the constructor feature is reserved.
18	When set to 1, the system default hierarchical folder is enabled. This folder is used when creating hierarchical items when a parent folder is not specified.
19	Reserved.
20	When set to 1, document routing events (events 610-615 and 622-630) are written to the ICMSTITEMEVENTS table; otherwise, document routing events are written to the ICMSTADMEVENTS table.
22	When set to 1, the communication from the library server to a resource manager is secured.
23	When set to 1, any protocol less than TLS 1.2 is disabled for the library server outbound connection. See also bit 6 of SystemFlag3.
24	When set to 1, secure transport of data is requested. Secure Sockets Layer (SSL) capable APIs enforces SSL communication with the resource manager. When set to 0, SSL is not used for resource manager or library server communication. Compatible Java™ APIs can be configured on a per-client basis to use SSL to communicate with the resource manager. Older, non-SSL-capable APIs earlier than Version 8.6 ignore this setting.
25	When set to 1, secure transport of data is required with server-side SSL enforcement. The library server uses a secure token and ensures that the secure channel required bit in the token is set. The resource manager enforces the SSL communication when the bit in the library server token is detected. Older, non-SSL-capable Java APIs from releases earlier than version 8.6 do not function correctly if this bit is set to a value of 1. Restriction: Set this bit to a value of 1 only if bit 24 is also set to 1.
26	When set to 1, secure transport of data is required with server-side SSL enforcement and client authentication. The Java APIs verify that the client has a valid client certificate and transmit the client certificate to the library server for token creation. The library server sets the client authentication required bit in the token and includes the client certificate as input for the token. The resource manager uses the validated certificate of the client to validate the token. Restriction: Set this bit to a value of 1 only if bit 24 and bit 25 are also set to a value of 1.
27	When set to 1, only 128-bit tokens are generated by the library server; otherwise, 128-bit tokens are not enforced.
28	Reserved.
29	When set to 1, library server accepts only certificates that are signed with a minimum SHA-256 hash algorithm; otherwise, if set to 0, the SHA-256 hash algorithm is not enforced.

RecordsManagerHost

Stores the IBM Records Manager host ID of the IBM Content Manager repository. The default value is 0. It will be set to non-zero value during Records Enabler installation.

When the value is less than or equal to 0, the IBM Records Manager security checks is not done during query and retrieve operations.

When the value is greater than 0, the IBM Records Manager security checks will be done for items in records enabled item types that are declared as records.

UDFTIMEOUT

The maximum time in seconds that the UDF ICMfetchFilter will wait for fetching an object from Resource Manager and performing text extraction before returning to NSE. In instances where the text extraction process hangs, it will time out after this number of seconds. A zero value means the UDF will never time out.

Note: Time-out is not supported for CommonStore and eMS, so UDFTIMEOUT should be 0 in this case.

HASHKEY

Use to hash user token.

UDFTRACEFILENAME

Full name including path and file name of the trace file used for the Db2 Text Search UDF (ICMCONSTRREF or ICMFetchContent and ICMFetchFilter) server trace and error log.

For example: C:\UDFTRACE.

For z/OS, the default is SYSPRINT.

UDFTRACELEVEL

The identifier that indicates what level of trace data to log in the UDFTRACEFILENAME.

Table 5. Db2 UDF Text Search Trace level
Trace level	Identifier	Description
0	`ICMTRACE_OFF`	0 value Trace is off. However, severe errors will still be logged.
1	`ICMTRACE_BASIC`	Trace entry and exit only.
2	`ICMTRACE_DETAILED`	Trace details flow of the code.
4	`ICMTRACE_DATA`	Trace data for variables. For ICMFetchFilter Only. z/OS does not support UDFTRACELEVEL 4.
8	`ICMTRACE_PERFORMANCE`	The Trace time spent in each stored procedure.
16	`ICMTRACE_ENV`	Trace the environment information.
32	`ICMTRACE_MEMORY`	Trace the memory management.
64	`ICMTRACE_BARRIER`	Trace the memory management.
128	`ICMTRACE_ITEMID`	For ICMFetchFilter Only. z/OS does not support UDFTRACELEVEL 128.

IBM Content Manager still performs the error logging even when the trace level is set to 0.

Turn on trace 15 for general problems, and trace 127 for memory-related problems.

For an explanation of the UDF level, see Logging and tracing for text search.

OITOPTIONFLAG

The option flags used for the IBM Content Manager Enterprise Edition ICMFetchFilter text search UDF to determine, besides text, any extra content of documents to be extracted. The value is interpreted in bit wise mode. Bit positions are counted from right to left. Counting starts with number 0. If a particular bit is enabled (set to 1), then the corresponding content is extracted for the documents to be indexed. The meaning of the bits and their default values are listed in the following table. In most cases, the default setting is recommended.

Table 6. Content access control flag
Bit	Hex mask	Name	Description	Default value
0	0x00000001	`SHEET`	The name of a sheet in a spreadsheet or presentation. For example, the sheet name in an Excel document.	1
1	0x00000002	`GENERATED`	Text generated from non-character data such as numbers in spreadsheets, dates, and so on. Because the text is not from the original document, the characters do not contribute toward character counts.	0
2	0x00000004	`LINKEDOBJECT`	Linked objects are attachments. For example, an email attachment.	1
3	0x00000008	`EMBEDDEDOBJECT`	The embedded object inside a document. For example, a Visio drawing diagram. The text can be extracted from the embedded object.	1

QuiesceGracePeriod

In seconds, the amount of time that active transactions are allowed to complete work after the library server enters the quiescing state. The default value is -1. This value means that no quiesce grace period is set.

QuiesceDuration

In seconds, the amount of time that the content management system is set to be quiesced. The default value is 0. This value means that no quiesce duration is set.

KeystoreFile

The fully qualified path of the keystore file that is used by the library server for secure communication to resource managers. This parameter is required when bit 22 of the SystemFlag2 parameter is enabled (set to 1).

KeystoreStashFile

The fully qualified path of the keystore stash file that is associated with the keystore file in the KeystoreFile parameter. This parameter is required if the keystore file is password-protected.

KeystoreCertLabel

The certificate label that is associated with a client certificate in the keystore. This certificate can be used by the library server to authenticate with resource managers during secure connection authentication. This field is optional.

SystemFlag3

The value of SystemFlag3 is interpreted in a bitwise mode. Bit positions are counted from right to left. Counting starts with number 0, so the rightmost bit is bit number 0 and the leftmost bit is Bit number 31. Valid values are:

Bit 0: Reserved.
Bit 1: Reserved.
Bit 2: Reserved
Bit 3: Reserved
Bit 4: This bit controls whether IBM Content Manager checks the length of string attributes.; 0: Enabled; 1: Disabled; The default value is 0.
Bit 5: This bit controls whether the LDAP user exit is unloaded after logon.; 0: Unload the user exit after logon.; 1: Keep the LDAP user exit loaded.; The default value is 0.
Bit 6: This bit controls which versions of TLS are enabled for the library server outbound connection.; This bit is effective only when bit 23 of SystemFlag2 is set to 0.; 0: TLS 1.3 and earlier versions are enabled.; 1: Only TLS 1.2 is enabled.; The default value is 0.
Bit 7: This bit controls how the usage statistics report indicates users: by name or number.; 0: User names; 1: User numbers; The default value is 0.

SystemFlag4

The value of SystemFlag4 is interpreted in a bitwise mode. Bit positions are counted from right to left. Counting starts with number 0, so the rightmost bit is bit number 0 and the leftmost bit is Bit number 31. If a particular bit is enabled (set to 1), then the corresponding function in the database is enabled.

UsageStatStartTime

The scheduled time for the database to move usage data to the library server usage statistics listener process. The default is 0 hr (midnight).

UsageStatFreqType

The scheduled frequency type for the database to move usage data to the library server usage statistics listener process.

1: Hour. This is the default.
2: Minute.

UsageStatFreq

The scheduled frequency for the database to move usage data to the library server usage statistics listener process. The default is 24 (hours).

LicenseType

Valid license types are:

0: Undefined.
1: USER_VOLUMN_UNIT (usage-based license for frequent Content Manager Enterprise Edition users). This is the default.
2: PROD_PROCESSOR_VOLUMN_UNIT (PVU-based production license).
3: NON_PROD_PROCESSOR_VOLUMN_UNIT (PVU-based non-production license).
4: EXTERNAL_VOLUMN_UNIT (Eligible Participant RVU-based license).

QueryThreshold

Query open cursor threshold time in milliseconds.

Table 7. IBM Content Manager preconfigured system control settings
Column	Value
LibraryServerID	1
LanguageCode	ENU
SysSegmentID	1
SysSegmentThreshld	0
ACLBindingLevel	2 (mixed - item type and item)
LibraryACLCode	3 (PublicReadACL)
PubAccessEnabled	0 (disabled)
DfltACLChoice	0 (Item Type)
SMSChoice	0
TraceLevel	0
MaxUsers	0
MaxUserAction	2
CurrentUsers	0
MaxLogonRetry	0
PasswordDuration	180 (days)
SysAdminEventFlag	0
SystemFlag	32 (2^5)
DatabaseType	0 (Db2)
MaxTxDuration	86400
MaxResultSetSize	0
AllowTrustedLogon	0
DocRoutingUpdate	0
DocRoutingFreq	10
Platform	%ICMCRLSDBPLATFORM%
SysTimeout	30
TIEUserID	%ICMCRLSDBUSER%
TIEPassword	%ICMCRLSDBENCRYPTPWD%
DatabaseName	%ICMCRLSDBDBNAME%
DBSchemaName	%ICMCRLSDBSCHEMA%
TraceFileName	%ICMCRLSDBTraceFileName%
EncryptionKey	reserved
KeepTraceOpen	0
MultipleTraceFiles	0
MaxTraceFileSize	0
PathICMRoot	%ICMCRLSDBICMROOT%
PathICMDLL	%ICMCRLSDBICMDLL%
SuspendServerTime	NULL
RMStatusInterval	60
RMStatusTimeout	15
TIEInterval	0
LSCurrentVersion	8.4.2.000
TraceUser	NULL
DIMsgDigestAlgo	0
DIEncryptionAlgo	0
SystemFlag2	0
RecordsManagerHost	0
UDFTimeout	0
HASHKEY	reserved
UDFTRACEFILENAME	%UDFTraceFileName%
UDFTRACELEVEL	0
OITOPTIONFLAG	13

Example SQL statements

Get ACL binding and public access enabled:

select aclbindinglevel, pubaccessenabled
  from icmstsyscontrol

Get trace level and trace file location:

select tracelevel, tracefilename
  from icmstsyscontrol