Federation Manager Guide › Keys and Certificates for Secure Federated Communication › Key Database Properties

Key Database Properties

The key database properties file, smkeydatabase.properties, defines the configuration properties for accessing and managing the key database.

If necessary, modify only the following two properties:

DBUpdateFrequencyMinutes

Indicates the frequency at which the policy engine and the key database synchronize. Specifically, it is the number of minutes after which the in-memory key database expires and is reloaded.

Until this interval passes, certificates and keys added, removed, or changed in the database do not take effect. You can adjust this setting to increase the frequency of updates.

If the value is 0, key database caching is disabled entirely. If the value is -1, the cache persists until Federation Manager is restarted.

Default: 60 minutes

LDAPAccessTimeout

Sets the maximum number of seconds that Federation Manager waits for an LDAP server operation to complete before the connection times out. For LDAP CRL checking, this setting determines the amount of time Federation Manager waits for a response from the LDAP directory to examine the CRL.

Enter a positive integer. For example, if you enter 30, the timeout is 30 seconds.

If Federation Manager connects to an LDAP server in a high latency network, increase the LDAPAccessTimeout connection timeout. If your network requires faster LDAP access, decrease the timeout value.

Default: 60

To modify these database properties

1. Navigate to one of the following locations:

   Windows: federation_mgr_home\siteminder\config\properties

   UNIX: federation_mgr_home/siteminder/config/properties

2. Open the properties file in a text editor.
3. Change the value.
4. Save the file.