Reference Guide › Registry Entries › The CA ControlMinder Registry › policyfetcher

policyfetcher

CA ControlMinder maintains policyfetcher service settings it uses under the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\policyfetcher

The policyfetcher registry key contains the following registry entries:

check_deployment_tasks

Defines how often, in seconds, policyfetcher checks for new deployment tasks (DEPLOYMENT resources) on the Distribution Host.

Default: 3600 (every 10 minutes)

deploy_timeout

Defines the number of seconds policyfetcher waits for a deployment or undeployment task to complete on the endpoint.

Default: 900

devcalc_command

Defines the selang command that policyfetcher uses to run the deviation calculation.

Default: start DEVCALC params(-nonotify)

Example: start DEVCALC params(-nonotify -precise)

dh_command_retry_interval

Defines the number of seconds between each DH notification command retry.

Default: 60

endpoint_heartbeat

Defines the frequency at which policyfetcher sends a heartbeat to the Distribution Host (DH). The frequency is a factor of the check_deployment_task setting, and determines how many times policyfetcher checks deployment tasks before it sends a heartbeat. For example, if check_deployment_task is set to the default 600 seconds (10 minutes) and you set this to 6, policyfetcher sends a heartbeat every 3600 seconds (1 hour).

After sending the heartbeat, the policyfetcher also runs the deviation calculator (start devcalc command) and then waits 60 seconds for the deviation calculation to complete. After 60 seconds, policyfetcher continues to check that local endpoint information is identical to DH information.

Default: 6

max_deployment_errors

Defines the maximum number of deployment errors that the endpoint sends to the DMS.

Default: 10

max_dh_command_retry

Defines the maximum number of times policyfetcher retries to get update notifications from DH before giving up.

Default: 10

max_dh_retry_cycles

Defines the maximum number of cycles policyfetcher retries to get update notifications from production DHs before moving to disaster recovery DHs.

Default: 5

policy_verification

Specifies whether policyfetcher verifies new deployment tasks on a backup CA ControlMinder database before executing the tasks.

Valid values:

1 - Run policy verification

0 - Disable policy verification

Default: 0

policyfetcher_enabled

Specifies whether to run the policyfetcher service.

Valid values:

1 - Run policyfetcher

0 - Disable policyfetcher

Default: 1

More information:

start devcalc Command—Initiate Policy Deviation Calculation