Time out Enterprise Manager interface

[Peejay62]

When opened the Enterprise Manager interface after some idle time the session disconnects and the login prompt reappears. Is this behaviour as expected? I have been looking for something like an idle session timeout setting but cannot find this. Is there an option to set this.
I want the session to never disconnect,or at least stay active for a very long time So you don't have to re-login all the time...

[foggy]

Yes, you can customize the auto-logoff timeout by changing the following value in the C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp\web.config file:

Code: Select all

<add key="sessionTimeout" value="30"/>

(value is in minutes)

The parameter has been deprecated. Scroll down for an actual solution.

[Peejay62]

Ok, thanks for the quick reply, assuming these are minutes i will put 1440 in it..

[Gostev]

I still remember when in early days, some paid product review sponsored by a competitor (whose solution did not have a web portal) noted that our portal does not have auto-logoff feature, making it insecure and not enterprise-ready. When actually, we did have auto-logoff since the very first version of web portal. Apparently, 30 minutes can be too long of a wait for some

[arosas]

Sorry for reviving an old post, used veeam search and found this forum.

Just wondering if this timeout value still can be used in the latest 9.5 version. Also after changing the value what service needs to be restarted for it to take effect?

[Mike Resseler]

Hi Tony,

No apologies for reviving an old post. I would rather say good job since you used search

Yes, this key has not changed so you can adapt it. I am not sure if you actually need to restart something but if you would restart the Veeam Enterprise Manager service that should do the trick

Mike

[arosas]

Great, thanks for the response.

[dellock6]

Hi, you only need to logoff any session of enterprise manager, and after login the new timeout will be applied to the sessions.

[Shieik]

Yes, you can customize the auto-logoff timeout by changing the following value in the C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp\web.config file:

Code: Select all

<add key="sessionTimeout" value="30"/>

(value is in minutes)

For monitoring we need the Enterprise maganer always open. If i put 0 on the sessiontimout value, it will close?

[foggy]

Apparently you need another timeout that is set right on EM itself. Zero value will not work so just set it to some high number.

[Shieik]

Thanks foggy, i will try with 43200 minutes

[ungerkkt]

Hello,

is it possible to deactivate the auto logoff of the Enterprise Manager website? I have tried to increase the parameter "sessionTimeout" of the web.config file, but it don't help.

Thank you for your help.

[wishr]

Hello,

Could you please specify the reason for this change? The increase of the logon session may be against security best practices.

Update: I've merged your topic with the related thread - please take a brief look.

Thanks

[ungerkkt]

I have read this thread already, but the parameter don't work for me. Why?

[wishr]

Hello,

Have you tried restarting the Enterprise Manager server or IIS itself? Which parameter you have changed (there are two above) and what is the value being set? Please provide a screenshot if possible.

Thanks

[ungerkkt]

This parameter was changed: <add key="sessionTimeout" value="8640" />
I have restarted the hole server end nothing happened. The timeout is shorter than the standard (30min).

[wishr]

I'll perform a few tests and post the result here.

[wishr]

Yes, you can customize the auto-logoff timeout by changing the following value in the C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp\web.config file:

Code: Select all

<add key="sessionTimeout" value="30"/>

(value is in minutes)

This configuration parameter has been replaced with a new registry key some time ago and no longer works. Instead, use the following registry key.

UserSessionTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup Reporting\

The supplied value should be in DWORD (x32) format, decimal, in minutes. Please, restart Veeam Backup Enterprise Manager service after adding the value.

Note, that by default the length of the session is 10 minutes which is the golden mean according to security best practices.

Hope it helps,
Fedor

[ungerkkt]

What should be the name of the DWORD?

[wishr]

Hello,

It's "UserSessionTimeout". Here is an example with two minutes:



Thanks

[ungerkkt]

Thank you for your help. Now it works.

[FTBZ]

Note, that by default the length of the session is 10 minutes which is the golden mean according to security best practices.

Thanks for the help.

Security best practices are good, but the problem is when you're downloading big files. When the session expires, the file download will stop. So it's perhaps a good idea to keep the downloading session running even if the user session has expired. Because for big files you need to set a long timeout.

[wishr]

Hi FTBZ,

The download does not depend on the user login session. Are you experiencing the described behavior? If so, please open a support case so we can take a look at the log files for a better understanding.

Thanks

[DChiavari]

In case anyone runs into the same issue (large ZIP downloads from Enterprise Manager failing after a 10 minutes), here is how you can tweak the timeout:

• Edit the web.config file in C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\WebApp (open Notepad or any other editor with Administrative privileges)
• Scroll down and find <location path=”ZipDownload.ashx”>
• Edit the value in the <httpRuntime executionTimeout="600" /> section (the value is in seconds. Default = 600 = 10 minutes)
• To apply the new value, restart the VeeamBackup site (which is the Enterprise Manager) in the IIS Management Console or via command line / powershell

[mkaec]

I ran into this today and it was frustrating. Navigating to where I need to be in enterprise manager is not the funnest thing. Having to re-authenticate is not a problem. But when I signed back in, my state was lost. When my computer is idle and it locks, Windows doesn't log me out and trash everything I had running. I just unlock the computer and resume what I was doing. I know enterprise manager is not alone in this. This is common whenever any web site kicks a user out for being idle. It's a bad trend in the industry and very anti-user.

[Gostev]

Perhaps because it is the requirement for many security-related certifications, and products simply cannot pass them without having this functionality by default.

[mkaec]

Think about what it would be like if all of the applications were closed out on your PC if you left it idle for 10 minutes.

[DChiavari]

Quick note about the Download timeout:

Please note that the Web.config file is overwritten when you update the Enterprise Manager to a later version, so the modification must be re-applied after every update.

(Note to moderators: it could probably be beneficial to add the red text in my original post above, as a closing note. If you do so, this post can be safely deleted. Thanks!)

[sschlott]

Dear PM Team,

Is there an official documentation for this setting?

UserSessionTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup Reporting\

Customer has the request from SEC to set 15 minutes and document the setting.

Kind Regards!

[Dima P.]

Hello Sebastian,

Please review the workaround discussed in this thread and let us know if it works for you. Thank you!