Tune security performance
Use the following procedures to tune the performance, without compromising the security settings.
Important: Performance degradation may be experienced on platforms running antivirus software. Performance Degradation may vary between antivirus software vendor and/or features that are enabled. WebSphere Application Server has no unique dependencies or special requirements when using antivirus software. Contact the antivirus vendor for information on how this impact may be mitigated Enable security decreases performance. The following tuning parameters provide ways to minimize this performance impact.
(zos) While it is not practical to run WebSphere Application Server for z/OS without security enabled, it is possible to perform certain tuning techniques to make the Application Server run better on z/OS. These techniques are documented in detail in Security tuning tips.
- Disable security on any application servers that do not need security. We can disable security in the console by clicking Security > Global security and deselecting the Enable administrative security option.
- Fine-tune the Authentication cache timeout value on the Authentication mechanisms and expiration panel in the console. For more information, see the Global security settings topic.
- Configure the security cache properties. For more information, see the Authentication cache settings topic.
- Enable the Enable SSL ID tracking option on the Session management panel in the console.
- Improve the performance of Web Services Security by downloading a Java Cryptography Extension (JCE) unlimited jurisdiction policy file that does not have restrictions on cryptography strength. See the information about tuning Web Services Security for Version 8.0 applications for details.
- (zos) Modify the RACF security settings as documented in the Security tuning tips article.
- Read the Secure Sockets Layer performance tips and Tune security configurations topics for more information.
- (zos) Read the Tune security configurations article for more information.
Related tasks
Tune Web Services Security for v8.5 applications
Session management settings