Optimizing Workload Automation AE for Embedded Entitlement Management

Products

• CA Workload Automation AE - Scheduler (AutoSys)

Issue/Introduction

After configuring WA AE(Workload Automation AutoSys Edition) to utilize EEM(Embedded Entitlement Management) for security, consider optimizing the Application Server on how it polls the EEM security server.  Optimization is done in two ways:
1. Set the time interval for when the Application Server polls EEM for any new or modified security policies.
2. Set the value for the number of WA AE security policies to collect on each poll event.
Tuning these two values can help load the latest policy changes without waiting too long for the policy to take effect, while minimizing processing impact of collecting and loading large sets of policies.

 

 

Environment

CA Workload Automation AE 

Resolution

AS_IAM_CACHE_UPDATE
Specifies the time (in seconds) that the application server polls the external security server for modified security policies.
Default: -2
Limits: -2, -1, or higher.
Note: If you set this variable to -1, the application server does not poll the external security server for policies. If you set this variable to -2, the application server obtains the poll interval from the external security server configuration.

AS_IAM_MAX_POLICIES
Specifies the maximum number of security policies that the application server collects from the external security server.
Default: 10,000
Limits: 2001 or higher.
Note: If you do not define this variable or you set this variable to a value less than 2001, the application server uses the default value.

 

 

These values can be exported as environment variables to the autosys scheduler / application server processes, to make them available to those proceses, before the changes are effective