Comprehensive data protection for all workloads
Peejay62
Expert
Posts: 235
Liked: 37 times
Joined: Aug 06, 2013 10:40 am
Full Name: Peter Jansen
Contact:

Time out Enterprise Manager interface

Post by Peejay62 »

When opened the Enterprise Manager interface after some idle time the session disconnects and the login prompt reappears. Is this behaviour as expected? I have been looking for something like an idle session timeout setting but cannot find this. Is there an option to set this.
I want the session to never disconnect,or at least stay active for a very long time So you don't have to re-login all the time...
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Time out Enterprise Manager interface

Post by foggy » 1 person likes this post

Yes, you can customize the auto-logoff timeout by changing the following value in the C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp\web.config file:

Code: Select all

<add key="sessionTimeout" value="30"/>
(value is in minutes)

The parameter has been deprecated. Scroll down for an actual solution.
Peejay62
Expert
Posts: 235
Liked: 37 times
Joined: Aug 06, 2013 10:40 am
Full Name: Peter Jansen
Contact:

Re: Time out Enterprise Manager interface

Post by Peejay62 » 1 person likes this post

Ok, thanks for the quick reply, assuming these are minutes i will put 1440 in it.. ;-)
Gostev
Chief Product Officer
Posts: 31457
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Time out Enterprise Manager interface

Post by Gostev »

I still remember when in early days, some paid product review sponsored by a competitor (whose solution did not have a web portal) noted that our portal does not have auto-logoff feature, making it insecure and not enterprise-ready. When actually, we did have auto-logoff since the very first version of web portal. Apparently, 30 minutes can be too long of a wait for some ;)
arosas
Enthusiast
Posts: 63
Liked: 10 times
Joined: Jun 09, 2015 9:33 pm
Full Name: Tony Rosas
Contact:

Re: Time out Enterprise Manager interface

Post by arosas »

Sorry for reviving an old post, used veeam search and found this forum. :-)

Just wondering if this timeout value still can be used in the latest 9.5 version. Also after changing the value what service needs to be restarted for it to take effect?
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Time out Enterprise Manager interface

Post by Mike Resseler »

Hi Tony,

No apologies for reviving an old post. I would rather say good job since you used search ;-)

Yes, this key has not changed so you can adapt it. I am not sure if you actually need to restart something but if you would restart the Veeam Enterprise Manager service that should do the trick

Mike
arosas
Enthusiast
Posts: 63
Liked: 10 times
Joined: Jun 09, 2015 9:33 pm
Full Name: Tony Rosas
Contact:

Re: Time out Enterprise Manager interface

Post by arosas »

Great, thanks for the response. :-)
dellock6
Veeam Software
Posts: 6137
Liked: 1928 times
Joined: Jul 26, 2009 3:39 pm
Full Name: Luca Dell'Oca
Location: Varese, Italy
Contact:

Re: Time out Enterprise Manager interface

Post by dellock6 »

Hi, you only need to logoff any session of enterprise manager, and after login the new timeout will be applied to the sessions.
Luca Dell'Oca
Principal EMEA Cloud Architect @ Veeam Software

@dellock6
https://www.virtualtothecore.com/
vExpert 2011 -> 2022
Veeam VMCE #1
Shieik
Influencer
Posts: 12
Liked: 1 time
Joined: Nov 23, 2017 2:53 pm
Contact:

Re: Time out Enterprise Manager interface

Post by Shieik »

foggy wrote:Yes, you can customize the auto-logoff timeout by changing the following value in the C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp\web.config file:

Code: Select all

<add key="sessionTimeout" value="30"/>
(value is in minutes)
For monitoring we need the Enterprise maganer always open. If i put 0 on the sessiontimout value, it will close?
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Time out Enterprise Manager interface

Post by foggy »

Apparently you need another timeout that is set right on EM itself. Zero value will not work so just set it to some high number.
Shieik
Influencer
Posts: 12
Liked: 1 time
Joined: Nov 23, 2017 2:53 pm
Contact:

Re: Time out Enterprise Manager interface

Post by Shieik »

Thanks foggy, i will try with 43200 minutes :D
ungerkkt
Novice
Posts: 5
Liked: 1 time
Joined: Sep 03, 2019 5:09 am
Contact:

[MERGED] Enterprise Manager deactivate auto logoff

Post by ungerkkt »

Hello,

is it possible to deactivate the auto logoff of the Enterprise Manager website? I have tried to increase the parameter "sessionTimeout" of the web.config file, but it don't help.

Thank you for your help.
wishr
Veteran
Posts: 3077
Liked: 453 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Enterprise Manager deactivate auto logoff

Post by wishr »

Hello,

Could you please specify the reason for this change? The increase of the logon session may be against security best practices.

Update: I've merged your topic with the related thread - please take a brief look.

Thanks
ungerkkt
Novice
Posts: 5
Liked: 1 time
Joined: Sep 03, 2019 5:09 am
Contact:

Re: Time out Enterprise Manager interface

Post by ungerkkt »

I have read this thread already, but the parameter don't work for me. Why?
wishr
Veteran
Posts: 3077
Liked: 453 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Time out Enterprise Manager interface

Post by wishr »

Hello,

Have you tried restarting the Enterprise Manager server or IIS itself? Which parameter you have changed (there are two above) and what is the value being set? Please provide a screenshot if possible.

Thanks
ungerkkt
Novice
Posts: 5
Liked: 1 time
Joined: Sep 03, 2019 5:09 am
Contact:

Re: Time out Enterprise Manager interface

Post by ungerkkt »

This parameter was changed: <add key="sessionTimeout" value="8640" />
I have restarted the hole server end nothing happened. The timeout is shorter than the standard (30min).
wishr
Veteran
Posts: 3077
Liked: 453 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Time out Enterprise Manager interface

Post by wishr »

I'll perform a few tests and post the result here.
wishr
Veteran
Posts: 3077
Liked: 453 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Time out Enterprise Manager interface

Post by wishr »

foggy wrote: Dec 05, 2013 2:56 pm Yes, you can customize the auto-logoff timeout by changing the following value in the C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp\web.config file:

Code: Select all

<add key="sessionTimeout" value="30"/>
(value is in minutes)
This configuration parameter has been replaced with a new registry key some time ago and no longer works. Instead, use the following registry key.

UserSessionTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup Reporting\

The supplied value should be in DWORD (x32) format, decimal, in minutes. Please, restart Veeam Backup Enterprise Manager service after adding the value.

Note, that by default the length of the session is 10 minutes which is the golden mean according to security best practices.

Hope it helps,
Fedor
ungerkkt
Novice
Posts: 5
Liked: 1 time
Joined: Sep 03, 2019 5:09 am
Contact:

Re: Time out Enterprise Manager interface

Post by ungerkkt »

What should be the name of the DWORD?
wishr
Veteran
Posts: 3077
Liked: 453 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Time out Enterprise Manager interface

Post by wishr »

Hello,

It's "UserSessionTimeout". Here is an example with two minutes:

Image

Thanks
ungerkkt
Novice
Posts: 5
Liked: 1 time
Joined: Sep 03, 2019 5:09 am
Contact:

Re: Time out Enterprise Manager interface

Post by ungerkkt » 1 person likes this post

Thank you for your help. Now it works.
FTBZ
Influencer
Posts: 22
Liked: 2 times
Joined: May 05, 2016 11:51 am
Contact:

Re: Time out Enterprise Manager interface

Post by FTBZ »

wishr wrote: Sep 04, 2019 4:07 pm Note, that by default the length of the session is 10 minutes which is the golden mean according to security best practices.
Thanks for the help.

Security best practices are good, but the problem is when you're downloading big files. When the session expires, the file download will stop. So it's perhaps a good idea to keep the downloading session running even if the user session has expired. Because for big files you need to set a long timeout.
wishr
Veteran
Posts: 3077
Liked: 453 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Time out Enterprise Manager interface

Post by wishr »

Hi FTBZ,

The download does not depend on the user login session. Are you experiencing the described behavior? If so, please open a support case so we can take a look at the log files for a better understanding.

Thanks
DChiavari
VeeaMVP
Posts: 1097
Liked: 298 times
Joined: Feb 02, 2012 7:03 pm
Full Name: Danilo Chiavari
Location: Rome, IT
Contact:

Re: Time out Enterprise Manager interface

Post by DChiavari » 7 people like this post

In case anyone runs into the same issue (large ZIP downloads from Enterprise Manager failing after a 10 minutes), here is how you can tweak the timeout:
  • Edit the web.config file in C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp (open Notepad or any other editor with Administrative privileges)
  • Scroll down and find <location path=”ZipDownload.ashx”>
  • Edit the value in the <httpRuntime executionTimeout="600" /> section (the value is in seconds. Default = 600 = 10 minutes)
  • To apply the new value, restart the VeeamBackup site (which is the Enterprise Manager) in the IIS Management Console or via command line / powershell
Image

Image
Danilo Chiavari
Presales Manager - Italy

www.danilochiavari.com
mkaec
Veteran
Posts: 462
Liked: 133 times
Joined: Jul 16, 2015 1:31 pm
Full Name: Marc K
Contact:

Re: Time out Enterprise Manager interface

Post by mkaec »

I ran into this today and it was frustrating. Navigating to where I need to be in enterprise manager is not the funnest thing. Having to re-authenticate is not a problem. But when I signed back in, my state was lost. When my computer is idle and it locks, Windows doesn't log me out and trash everything I had running. I just unlock the computer and resume what I was doing. I know enterprise manager is not alone in this. This is common whenever any web site kicks a user out for being idle. It's a bad trend in the industry and very anti-user.
Gostev
Chief Product Officer
Posts: 31457
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Time out Enterprise Manager interface

Post by Gostev »

Perhaps because it is the requirement for many security-related certifications, and products simply cannot pass them without having this functionality by default.
mkaec
Veteran
Posts: 462
Liked: 133 times
Joined: Jul 16, 2015 1:31 pm
Full Name: Marc K
Contact:

Re: Time out Enterprise Manager interface

Post by mkaec »

Think about what it would be like if all of the applications were closed out on your PC if you left it idle for 10 minutes.
DChiavari
VeeaMVP
Posts: 1097
Liked: 298 times
Joined: Feb 02, 2012 7:03 pm
Full Name: Danilo Chiavari
Location: Rome, IT
Contact:

Re: Time out Enterprise Manager interface

Post by DChiavari »

Quick note about the Download timeout:

Please note that the Web.config file is overwritten when you update the Enterprise Manager to a later version, so the modification must be re-applied after every update.

(Note to moderators: it could probably be beneficial to add the red text in my original post above, as a closing note. If you do so, this post can be safely deleted. Thanks!)
Danilo Chiavari
Presales Manager - Italy

www.danilochiavari.com
sschlott
Veeam Software
Posts: 54
Liked: 1 time
Joined: Jan 05, 2023 2:19 pm
Full Name: Sebastian Schlott
Contact:

[MERGED] Enterprise Manager UI Timeout

Post by sschlott »

Dear PM Team,

Is there an official documentation for this setting?

UserSessionTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup Reporting\

Customer has the request from SEC to set 15 minutes and document the setting.

Kind Regards!
Dima P.
Product Manager
Posts: 14396
Liked: 1568 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Time out Enterprise Manager interface

Post by Dima P. »

Hello Sebastian,

Please review the workaround discussed in this thread and let us know if it works for you. Thank you!
Post Reply

Who is online

Users browsing this forum: ante_704, aurelien-beneteau, Google [Bot] and 242 guests