Registry key settings for Audit Store in Policy Server

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

 

What are the recommended registry settings for Audit Store?

 

Resolution

IMPORTANT:

This article contains information about modifying the registry. Before modifying the registry, make sure to create a backup of the registry and ensure a good understanding of how to restore the registry if a problem may occur. For more information about how to back up, restore, and edit the registry, please review the relevant Microsoft Knowledge Base articles on support.microsoft.com.

Registry keys related to Audit Store can be found in the HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\Database\Log registry location:

• Data Source: This setting represents the name of the Data Source being used for the Audit Store.
• MaxConnections: Specifies the maximum number of active sessions that may be allowed to the Audit Store at a given time.
• User Name: This setting represents the name of the user being used for the Audit Store connection.
• Password: This setting represents the encrypted password. This is usually encrypted by the SiteMinder Management Console.
• ProviderNamespace: This setting represents the connection type, for Audit Store ODBC is the only supported.

If the Policy Server will operate under heavy load, set the following registry key values in the HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\Database\ registry location to prevent loss of auditing data under heavy load:

• ConnectionHangwaitTime: Set to 60 seconds for heavy loads. The default is 30 seconds. The value of ConnectionHangwaitTime should always be at least double the value of QueryTimeout and LoginTimeout.
• QueryTimeout: Set to 30 seconds for heavy loads. The default is 15 seconds.
• LoginTimeout: Set to 30 seconds for heavy loads. The default is 15 seconds.

Registry keys related to Asynchronous auditing can be found in the HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\Reports\NamespaceProviders registry location (1):

• SQLBulkInsertFlushRowCount: This represents the number of rows that will be inserted during each bulk insert. The default is 1000. A bulk insert is performed when the number of records specified in the SQLBulkInsertFlushRowCount parameter is reached, even if the flush interval is not reached.
• SQLBulkInsertFlushInterval: This setting represents the amount of time in seconds that is allowed to transpire between bulk inserts to the audit log database. The default is 60 seconds.

 

Additional Information

 

1. Policy Server Fails to Insert Audit Events into the Audit Database