You can enforce a maximum session lifetime for Manage (Navigator) and Secure (navXwsm) by setting the session.expiration.time system property on the VM where each application is running.
The value is specified in minutes.
Sessions are automatically logged out when this limit is reached, even if the user is active.
For compliance, configure the value to 720 minutes (12 hours) or less. Users must log in again after the session expires.
If the property is not set, the default maximum session lifetime is 12 hours.
Set session.expiration.time on Linux
On Linux deployments, you must configure the session expiration separately for Manage and Secure, because Manage runs on Tomcat, while Secure REST APIs run under WGS.
Configure Manage (Navigator)
Create or update the file:
apache-tomcat/bin/setenv.shAdd the following lines:
#!/bin/sh CATALINA_OPTS="$CATALINA_OPTS -Dsession.expiration.time=<minutes>"
Replace
<minutes>with the session lifetime in minutes (for example,720).
Configure Secure (navXwsm)
Secure REST APIs run under WGS, so Tomcat startup scripts do not apply to Secure. Instead,
Open the
ATPNODE.laxfile from[AUTOPILOT_HOME]/localhostLocate the property line starting with:
lax.nl.java.option.additional=Append the following:
-Dsession.expiration.time=<minutes>Replace
<minutes>with the session lifetime in minutes (for example,720).
Restart Tomcat (for Manage) and the CEP (for Secure) to apply the new setting.
Set session.expiration.time on Windows
Perform these steps on the machine where Manage or Secure is installed.
If they run on different servers, configure the variable on each server.
Search for “Edit the system environment variables” in Windows and click it.
The System Properties dialog opens. Go to the Advanced tab and click Environment Variables…
The Environment Variables dialog opens. In the System variables section, click New….
The New System Variable dialog opens.
In the Variable name, enter:
session.expiration.time
In the Variable value, enter the session lifetime in minutes:
For example,
720for 12 hours,480for 8 hoursUse a value no greater than 720 minutes
Click OK to close the New System Variable dialog.
Click OK again to close the Environment Variables dialog, and OK to close System Properties.
Restart Tomcat for the Manage application and WGS for the Secure application.