Setting the web server
When configuring your RSA SecurID within your web server, It is recommended that you set the following cookie settings:
1. Open Internet Information Server (IIS).
2. Right-click the website under which the virtual folder are created, and select Properties.
3. Click the RSA SecurID tab.
4. In the Cookie Expiration Control section, select the Cookies Expire if Not Used Within the Specified Time radio button.
5. In the Expiration Time field, type the number of minutes you would like to allocate for user inactivity.
6. Click Apply.
7. Click OK.
Note
By applying these RSA cookie configuration settings, users will expect to see their cookie expire only when closing their browser. However, their cookie will expire, even if they do not close their browser, when their inactivity period surpasses the expiration time specified.
If you select the Cookies Always Expire after the Specified Time radio button, users see their cookie expire after the specified expiration time. If this happens while they have a host display session open, they must reenter their user name and password in order to continue the session.