Use the Security Options tab to configure security settings for Progress Application Server.

Property Default value Description
Tomcat user file path conf/tomcat-users.xml Specify the name and location of the local user account file.

You can change this to be external to the server instance's directory tree so that it is not overwritten by incremental updates.
Lockout removal warning time (seconds) 3600 Specify the time limit, in seconds, before which the Lockout Realm should log when it removes a lockout cache entry.
User lockout cache size 1000 Specify the cache size of locked out users the Lockout Realm maintains.
Lockout failure count 5 Specify the number of failed login attempts a user can perform before the Lockout Realm locks out that user account.
Lockout failure timeout (seconds) 300 Specify the time, in seconds, the Lockout Realm keeps a user account locked out.