Some advanced options in Site Manager are exposed through setting registry keys on the Site Manager server. The available registry keys are:
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | Connection Timeout |
| Type | DWORD |
| Default | 480 (8 minutes) |
| Affects | Site Manager Server |
| Description | To avoid NAT routing causing TCP socket disconnection, Site Manager and the Agent will exchange keep alive messages on the interval set in this key. Lowering the number will cause more frequent network traffic, but may be necessary if a NAT router, gateway, switch or other network appliance is set to disconnect sockets more frequently than after 8 minutes idle. |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | SSL Cipherlist |
| Type | String (REG_SZ) |
| Default | TLSv1+HIGH:!SSLv2:!DES:!3DES |
| Affects | Site Manager Server |
| Description | The SSL cipherlist controls which SSL/TLS encryption methods are allowed by the Site Manager's HTTPS management interface. If stricter limits are required for security, any OpenSSL cipherlist as documented on the OpenSSL website may be used. For example, to restrict the web interface to TLS 1.2 and forbid MD5, SHA1 and RC4 hashing, the following string may be used: "TLSv1.2:HIGH:kRSA:!SHA1:!RC4:!MD5:!eNULL:!aNULL:!AES128" |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | Enable LDAPS |
| Type | DWORD |
| Default | 1 |
| Affects | Site Manager Server |
| Description | If set to 0, Site Manager will only attempt unencrypted LDAP requests to Active Directory servers. If set to 1, Site Manager will attempt LDAPS (LDAP over SSL) requests and only fall back to unencrypted requests on error. |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | LDAPS Port |
| Type | DWORD |
| Default | 636 |
| Affects | Site Manager Server |
| Description | The TCP port number to attempt LDAPS queries on. |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | LDAP Port |
| Type | DWORD |
| Default | 389 |
| Affects | Site Manager Server |
| Description | The TCP port number to attempt LDAP queries on. |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | Outgoing HTTP Disable |
| Type | DWORD |
| Default | 0 |
| Affects | Site Manager Server |
| Description | If set to a non-zero value, this will disable Site Manager's outgoing checks for licenses and updates. This can be useful to set in cases where a Site Manager which cannot contact the internet is experiencing long delays when attempting to add offline keys |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | Outgoing HTTP Timeout |
| Type | DWORD |
| Default | 5 |
| Affects | Site Manager Server |
| Description | By default, there is a 5 second connection timeout on all outgoing HTTP/HTTPS checks from Site Manager. If this is a problem due to slow networking, the timeout can be increased by modifying this registry key |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | Listen IP Address |
| Type | String (REG_SZ) |
| Default | n/a |
| Affects | Site Manager Server |
| Description | Site Manager will listen on it's web interface on either the loopback address (127.0.0.1) in restricted mode or on all addresses otherwise. If this registry key is set, the Site Manager web UI will only accept connections from the IP address in this key. This can be useful in advanced deployments where the UI should only be accessible from one network. |
| Key | HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager |
|---|---|
| Value | Disable Default Admin Access |
| Type | DWORD |
| Default | 0 |
| Affects | Site Manager Server |
| Description | By default, Site Manager allows login from any Administrator account on the local computer or on the domain which the local computer is connected to. Setting this registry key to non-zero will disable this behavior and only allow users and groups which have been explicitly allowed access in the settings page of Site Manager access. This key should only be set after initial configuration of Site Manager is completed, to prevent accidental lockout. |