facilities.properties
Starting in IBM® Maximo® Real Estate and Facilities 9.2, you configure server-level properties or properties that contain sensitive values in the facilities.properties file. The file is stored in a Red Hat OpenShift secret and mounted into each application pod at startup.
About this file
Changes to this file take effect after you restart the pods. To apply changes, edit the Red Hat OpenShift secret that contains the file, then trigger a rollout restart. You do not need to access the pod file system directly.
oc rollout restart deployment <deployment-name>For information about configuring platform properties in the Administrator Console, see Platform properties.
External server settings
| Property | Default | Description |
|---|---|---|
| notifications.mail.smtp.ssl.checkserveridentity | true | Enables SMTP SSL server identity (hostname) verification. When set to
true, the SMTP server certificate's hostname must match the server identity,
which helps prevent man-in-the-middle attacks. Set to false only if hostname
verification is not required. |
| notifications.mail.smtp.email.label | Workflow Notification | The display label for the sender email address on outgoing workflow notification
emails. Works with WF_NOTIFICATION_EMAIL_ID, which is configured in the
Admin Console. For example, the recipient sees: Workflow
Notification<WFNotifications@company.com>. |
| mail.imaps.ssl.key | (empty) | The path on the network to the SSL keystore for IMAPS connections used by the Incoming Mail Agent. If empty and IMAPS is used, the application server must set the keystore accordingly. |
| mail.imaps.ssl.port | 993 | The default port for IMAPS connections used by the Incoming Mail Agent. |
| ENABLE_CMIS | N | Enables integration with an Enterprise Content Management (ECM) system that uses Content
Management Interoperability Services (CMIS). Set to Y if the installation uses a
CMIS-supported ECM to manage documents. Set to N if the installation uses
the built-in Document Manager. |
| CMIS_URL | (empty) | The URL of the CMIS server for the AtomPub protocol. Leave empty if CMIS is not enabled. |
| CMIS_USER | (empty) | The user name for the CMIS server. Leave empty if CMIS is not enabled. |
| CMIS_PW | (empty) | The password for the CMIS server. The password must be encrypted. Leave empty if CMIS is not enabled. |
| CMIS_STORE | (empty) | The name of the ECM document store that holds the documents. Leave empty if CMIS is not enabled. |
| CMIS_ROOT | (empty) | The ECM folder that serves as the root for all documents. Leave empty if CMIS is not enabled. |
| EXTERNAL_FRONT_END_SERVER | (empty) | The main URL that external users click in email notifications to access the application.
Specify the protocol, host, and optional port. Do not include the context path. The application
supports split-horizon DNS so that internal and external users access the application through
the same URL but receive different IP addresses from their respective DNS servers.
Examples:
|
Agent settings
These properties control agent thread counts and scheduling behaviour on this server instance. To manage which agents start on each server, use the Agent Manager page in the Admin Console.
| Property | Default | Description |
|---|---|---|
| CadIntegratorLoad | 100.0 | Thread load proportion for the CAD Integrator agent. Determines how many threads the agent uses relative to the total number of database connections. |
| CadIntegratorMaxThreads | 5 | Upper limit on the number of threads for the CAD Integrator agent. Set to
0 for no upper limit. |
| DataImportAgentLoad | 100.0 | Thread load proportion for the Data Import agent. |
| DataImportAgentMaxThreads | 6 | Upper limit on the number of threads for the Data Import agent. Set to
0 for no upper limit. |
| SchedulerAgentLoad | 100.0 | Thread load proportion for the Scheduler agent. |
| SchedulerAgentMaxThreads | 3 | Upper limit on the number of threads for the Scheduler agent. Set to
0 for no upper limit. |
| WFAgentLoad | 100.0 | Thread load proportion for the Workflow agent. |
| WFAgentMaxThreads | 80 | Upper limit on the number of threads for the Workflow agent. Set to
0 for no upper limit. |
| ReportQueueAgentLoad | 100.0 | Thread load proportion for the Report Queue agent. |
| ReportQueueAgentMaxThreads | 2 | Upper limit on the number of threads for the Report Queue agent. Set to
0 for no upper limit. |
| MSExchangeSubscriptionsThreadpoolLoad | 100.0 | Thread load proportion for the Microsoft Exchange Subscriptions thread pool. |
| AGENT_STALE_TIME_IN_SECONDS | 60 | The idle time in seconds before an agent is considered unresponsive and other servers
might initiate cleanup on that agent and its server. The minimum acceptable value is
60. |
| WF_AGENT_MAX_ACTIVE_PER_USER | 70 | The maximum number of active workflow threads per user. This prevents a single user from exhausting all available workflow threads. |
| CLEAN_HOUR | 0 | The hour at which the Maintenance Agent starts, expressed as a 24-hour value between
0 and 23. Set this to the quietest two-hour window for record
creation to minimise impact on users. |
| CLEAN_TIMEOUT | 240 | The number of minutes the Maintenance Agent is allowed to run. The default is 240 minutes (4 hours). |
| CLEANUP_AGENT_SCHEDULER_TASKS | Y | Controls whether the Maintenance Agent runs scheduler cleanup tasks. Set to
Y to enable or N to disable. |
| CLEANUP_AGENT_RECORD_BATCH_SIZE | 50000 | The maximum number of records in each deletion batch processed by the Maintenance Agent. The modulus function is applied to the spec ID to distribute records into batches. |
| WF_MAX_BATCH_ENTRIES | 200000 | The batch size used when cleaning up workflow instances. |
| WF_AGENT_WAITTIME | 100 | The wait time in milliseconds before the Workflow agent checks for additional free
threads. The minimum value is 100. |
| WF_FUTURE_AGENT_SLEEPTIME | 5 | The sleep interval in seconds for the Workflow Future agent between checks for pending future-dated workflow events. |
| REPORTDATA_AGENT_SLEEPTIME | 5 | The sleep interval in minutes for the Report Data Index agent between indexing passes. |
| REPORTDATA_AGENT_RECORD_COUNT | 500 | The number of records the Report Data Index agent reindexes per pass. |
System settings
| Property | Default | Description |
|---|---|---|
| httpheader.Content-Security-Policy | frame-ancestors 'self' *.office.com *.office365.com *.cloud.microsoft; | The value for the HTTP Content-Security-Policy response header sent on
all responses from this server. To allow the application to open in an iframe from additional
domains, add those domains to the frame-ancestors directive. |
| httpheader.X-Frame-Options | SAMEORIGIN | The value for the HTTP X-Frame-Options response header. Use
SAMEORIGIN to permit framing only from the same origin and help prevent
clickjacking attacks. |
| httpheader.Strict-Transport-Security | max-age=63072000; includeSubDomains; preload | The value for the HTTP Strict-Transport-Security response header. The
max-age value specifies in seconds how long browsers remember that the site
requires HTTPS. Include includeSubDomains to apply the policy to all
subdomains. |
| httpheader.X-Content-Type-Options | nosniff | The value for the X-Content-Type-Options response header. Set to
nosniff to disable content and MIME-type sniffing by the browser. |
| httpheader.X-XSS-Protection | 1; mode=block | The value for the X-XSS-Protection response header. A value of
1; mode=block enables the XSS filter in supported browsers and instructs them
to block the page if an XSS attack is detected. |
| httpheader.Cache-Control | no-cache, private | The value for the Cache-Control response header. no-cache
ensures the client revalidates with the server before using a cached copy.
private prevents shared caches such as proxies and CDNs from storing the
response. |
| httpheader.Referrer-Policy | no-referrer | The value for the HTTP Referrer-Policy response header. Controls how
much referrer information is included with requests. Valid values include
no-referrer, same-origin,
strict-origin-when-cross-origin, and unsafe-url. |
| STATIC_CLIENT_RESOURCE_LIST | startsWith:/html/en/default/js/lib,endsWith:.css,endsWith:tririgastyle.jsp,endsWith:.js | A comma-separated list of static client resource paths that contain no sensitive data.
Resources on this list are served with the cache-control value from
STATIC_CLIENT_RESOURCE_CACHE_CONTROL_VALUE instead of the default
Cache-Control header. Each entry must start with startsWith:
or endsWith:. |
| STATIC_CLIENT_RESOURCE_CACHE_CONTROL_VALUE | private, max-age=604800 | The cache-control header value applied to static client resources listed in STATIC_CLIENT_RESOURCE_LIST. The default allows browsers to cache resources locally for 604800 seconds (one week). |
| REPORT_MEMORY_USAGE_LIMIT | 50 | The maximum percentage of available server memory that a report or query can consume
while running or exporting. If the limit is exceeded, the report or query fails with an
insufficient-resources error. Valid values are between 0 and
100. A value of 0 or 100 disables the
limit. |
| EXPORT_EXCEL_BATCH_PROCESS_SIZE | 75000 | The number of records processed per batch when exporting a report to Excel. Tune this value to balance the number of batches against available application server memory. |
| TABLE_SIZE_CHECK_FOR_ORACLE | N | Controls whether the platform checks the 8 KB table-size limit on Oracle databases
during startup. Set to Y to enable the check. |
| ErrorHandlerStrategy.MessageResetMinutes | 60 | The time in minutes before the duplicate warning message log collection is cleared. When cleared, a log entry identifies any messages with a count greater than 1. |
| VIRUS_SCAN_ENABLED | FALSE | Controls whether virus scanning is performed when a file is uploaded.
TRUE enables scanning; FALSE disables it. |
| VIRUS_SCANNER_IP_ADDRESS | (empty) | The IP address of the virus scanner server. Required when
VIRUS_SCAN_ENABLED is TRUE. |
| VIRUS_SCANNER_IP_PORT | (empty) | The port of the virus scanner server. Required when
VIRUS_SCAN_ENABLED is TRUE. |
| ENABLE_CONCURRENT_AVAILABILITY | true | Controls whether Reserve availability queries are processed concurrently. Set to
true to enable concurrent processing. |
| CONCURRENT_AVAILABILITY_POOL_SIZE | 200 | The maximum number of system-wide threads used to process availability queries when
ENABLE_CONCURRENT_AVAILABILITY is true. |
| CONCURRENT_AVAILABILITY_REQUEST_BATCH_SIZE | 10 | The maximum number of threads each availability request can use when
ENABLE_CONCURRENT_AVAILABILITY is true. |
| PERFORMANCE_ANALYZER_MAX_FILE_SIZE_IN_MB | 110 | The maximum file size in megabytes that the Performance Analyzer accepts when uploading or processing log files. Increase this value to support larger log files, but note that larger files result in slower loading and rendering. Adjust this value to match the size-based triggering policy in the log4j2.xml file, and add a buffer of approximately 4–10% to account for log4j2 overhead. |
| PERFORMANCE_LOGGING_THRESHOLD | 100 | The millisecond threshold for performance logging. An operation must take longer than this threshold to be logged. Applies to Extended Formula, SQL, Report, and State Transition performance log settings. If no value or an invalid value is set, all operations are logged. |
| IMAGE_URL | (empty) | The server URL including the context path, used when displaying images in notifications. This value is server-specific and must be set individually on each server. |
| REQUEST_RATE_LIMIT_ENABLED | false | Controls whether request rate limiting is enforced on incoming requests. Set to
true to enable rate limiting. |
| REQUEST_RATE_LIMIT | 200 | The maximum number of requests allowed within the configured time window when rate limiting is enabled. |
| REQUEST_RATE_LIMIT_REFILL_COUNT | 100 | The number of requests added to the limit after each refill period elapses when the rate limit has been exceeded. |
| REQUEST_RATE_LIMIT_REFILL_TIME_WINDOW | 2 | The duration in minutes for each refill period when the rate limit has been exceeded. |
| REQUEST_BUCKET_CLEANUP_INTERVAL | 1 | The interval in minutes at which expired request-rate-limit buckets are removed from memory. |
| REVERSIBLE_ENCRYPTION_BATCH_SIZE | 10000 | The batch size for reversible encryption operations. A larger batch size can improve
performance for bulk encryption but uses more memory. Valid range: positive integer; maximum
recommended value is 10000. |