Skip to main content

Service Settings

Advanced configuration

Most NIM Service settings are managed in the Configuration area. Use the settings below only when you need behavior that is not available in the web interface.

Before you change a service settingRecord the current value, make one change at a time, and restart the NIM Service when a setting requires it. Test changes in a non-production environment whenever possible.

Settings.json​

NIM reads settings.json when the service starts. NIM maintains most values in this file; the advanced keys below can be added when needed.

disable_variable_validationBoolean · Default: false

Variable validation

Disables validation of variables submitted by NIM apps. Keep validation enabled in production; disabling it allows end users to manipulate data sent to the service.

Startup log: NIM reports whether application variable validation is enabled or disabled.

lookup_no_auditingBoolean · Default: false

Lookup auditing

Disables audit-database updates for large lookup tables. This can reduce processing overhead when lookup auditing is not required.

Startup log: NIM reports whether lookup-table auditing is enabled or disabled.

ad_max_gms_deltaNumber · Default: unlimited

AD maximum changes threshold

Limits the number of Active Directory group membership changes per sync. Use it when large changes produce the error The administrative limit for this request was exceeded.

Recommendation: Start with 10000. NIM may need multiple sync runs to complete all pending changes.

ng_debugBoolean · Default: false

Name Generator debug logging

Writes additional diagnostic logging when a name generator runs within a mapping. Enable it temporarily while troubleshooting and disable it when finished.

ng_iteration_maxInteger · Default: 50

Name iteration limit

Sets the shared maximum iteration count for iterating name parts in a name generator. NIM returns an error when the limit is reached.

Range: 5–999. Values above 100 can reduce performance in larger environments. Restart the NIM Service after changing this value.

caution

Only set disable_variable_validation as a last resort. It weakens validation of application-supplied data.

Windows Registry settings​

These service-level values are set in the Windows Registry. Back up the affected key before editing it.

--max-old-space-size=Example: 16384

Service memory limit

Registry pathHKLM\SYSTEM\CurrentControlSet\Services\NIM\Config\args1

Controls the maximum committed memory available to the NIM Service. The default is 4 GB. NIM Framework includes scripts for adjusting this value.

NODE_EXTRA_CA_CERTSCertificate path

Trusted root certificates

Registry pathHKLM\SYSTEM\CurrentControlSet\Services\NIM\env

Adds trusted certificate authorities for NIM. For example: C:\Tools4ever\certs\FiddlerRoot.cer.

NODE_TLS_REJECT_UNAUTHORIZEDExample: 0

TLS verification

Registry pathHKLM\SYSTEM\CurrentControlSet\Services\NIM\env

Disables certificate verification for REST Connector requests, typically for proxy troubleshooting.

--tls-cipher-listAllowed or blocked ciphers

TLS cipher list

Registry pathHKLM\SYSTEM\CurrentControlSet\Services\NIM\Config\args1

Specifies TLS ciphers to allow or disallow. See the Node.js TLS cipher-suite documentation for the supported format.

--tls-min-v1.3No value required

Require TLS 1.3

Registry pathHKLM\SYSTEM\CurrentControlSet\Services\NIM\Config\args1

Sets TLS 1.3 as the minimum protocol version. NIM otherwise uses TLS 1.2 as the minimum. See the Node.js CLI documentation for details.

danger

Do not set NODE_TLS_REJECT_UNAUTHORIZED=0 in production unless your security team has explicitly approved the exception. It bypasses certificate verification.