---
title: TTL for the entire public key cache in seconds
description: This property is only relevant when the property Enable internal checking of JWT signature is set to true.
component: java-agents
version: 2025.11
page_id: java-agents:properties-reference:org.forgerock.agents.public.key.cache.ttl.seconds
canonical_url: https://docs.pingidentity.com/java-agents/2025.11/properties-reference/org.forgerock.agents.public.key.cache.ttl.seconds.html
---

# TTL for the entire public key cache in seconds

This property is only relevant when the property [Enable internal checking of JWT signature](org.forgerock.agents.internal.check.jwt.signature.enabled.html) is set to `true`.

The agent caches AM public keys used for JWT signing. When the agent receives a JWT signed using a key not in its cache, it will invoke AM to retrieve the current list of valid keys (and the TTL will be reset).

This property determines the TTL for the whole cache, and all its entries. It can be set to a relatively large value as keys are not often changed within AM.

|                          |                                                                                        |
| ------------------------ | -------------------------------------------------------------------------------------- |
| Property name            | `org.forgerock.agents.public.key.cache.ttl.seconds`                                    |
| Aliases                  | `org.forgerock.agents.public.key.cache.ttl.seconds`   Introduced in Java Agent 2024.11 |
| Function                 | Authentication service                                                                 |
| Type                     | Integer                                                                                |
| Default                  | `3600`                                                                                 |
| Bootstrap property       | No                                                                                     |
| Required property        | No                                                                                     |
| Restart required         | No                                                                                     |
| Local configuration file | `AgentConfig.properties`                                                               |