Policy Server Guides › Policy Server Administration Guide › Configuring General Policy Server Settings

Configuring General Policy Server Settings

This section contains the following topics:

Policy Server Settings Overview

The Policy Server allows you to configure a number of general settings that determine the way it behaves and performs from the Policy Server Management Console Settings tab:

TCP ports for access control
Administration settings including the TCP port, and Inactivity Timeout
Connection settings
RADIUS settings
Performance settings
OneView Monitor settings

Configure Policy Server Settings

To configure general Policy Server settings

Start the Policy Server Management Console.
Important! If you are accessing this graphical user interface on Windows Server 2008, open the shortcut with Administrator permissions. Use Administrator permissions even if you are logged in to the system as an Administrator. For more information, see the release notes for your CA SiteMinder® component.
Click the Settings tab.
Note: For more information about the settings and controls on this tab, click Help, Management Console Help.
Adjust the desired settings.
When you have finished, click Apply to save your settings, or click OK to save the settings and exit the Management Console.

Configure Access Control Settings

The Policy Server uses three separate TCP ports to communicate with CA SiteMinder® Agents for authentication, authorization, and accounting.

To enable or disable these Agent communication ports, as well as change the TCP port numbers used for each function, use the controls in the Access Control group box on the Management Console Settings tab.

Configure Policy Server Administration Settings

The Policy Server uses a TCP port to communicate with the Administrative UI to allow browser-based policy management.

To enable or disable and change the TCP port number used to communicate with the Administrative UI, as well as specifying a timeout value for administrative inactivity, use the controls in the Administration group box on the Management Console Settings tab.

Configure Policy Server Connection Options

To specify the maximum number of Policy Server threads, and the idle timeout for a connection to the Policy Server, use the controls in the Connection Options group box on the Management Console Settings tab.

Configure Policy Server Performance Settings

To configure cache and thread settings to tune Policy Server performance, use the Performance group box on the Management Console Settings tab.

Configure RADIUS Settings

To specify settings to enable support of RADIUS components in your deployment, use the RADIUS group box on the Management Console Settings tab.

Configure OneView Monitor Settings

By default the OneView Monitor runs locally on the Policy Server that it is monitoring.

To configure the monitor to accept connections from other Policy Servers to be monitored remotely or to specify a central remote Policy Server that is to monitor all Policy Servers in a cluster, use the OneView Monitor group box on the Management Console Settings tab.

Reschedule CA SiteMinder® Policy Data Synchronization

CA SiteMinder® automatically synchronizes Policy Data using the XPSSweeper tool. You can change how often this tool runs by setting the following parameter:

AutosweepSchedule

Specifies the days and times (hour and minute) at which the XPSSweeper process runs.

Default: Mondays at 08:30

Limits: GMT Time zone using the 24-hour clock. Separate multiple entries with commas or spaces

Example: Mon@13:30,Tue@14:00

Note: If you do not have write access to the CA SiteMinder® binary files (XPS.dll, libXPS.so, libXPS.sl), an Administrator must grant you permission to use the related XPS command line tools using the Administrative UI or the XPSSecurity tool.

To reschedule the synchronization of the CA SiteMinder® databases

Open a command line on the Policy Server, and enter the following command:
```
xpsconfig
```
The tool starts and displays the name of the log file for this session, and a menu of choices opens.
Enter the following:
```
xps
```
A list of options appears.
Enter the following:
```
8 (AutosweepSchedule)
```
The current schedule for the XPSSweeper tool appears.
Type C, and then enter the day and time you want. If you want to enter several days or times, separate them with commas or spaces. Use the following format:
```
Mon@13:30,Tue@14:00
```
The new and old settings appear. The values you added are shown at the bottom of the settings as a "pending value."
Do the following:
1. Enter Q twice.
2. Enter L.
3. Enter Q to end your XPS session.
Your changes are saved and the command prompt appears.