Federation Manager cannot execute encryption and decryption properly on Solaris 10 systems if the default security provider configuration is in place.
To solve this problem, list the Sun provider (sun.security.provider.Sun) before the PKCS11 provider (sun.security.pkcs11.SunPKCS11) in the java.security properties file. This file is located in the lib/security directory of the JDK installation.
Modify the java.security file as follows:
security.provider.1=sun.security.provider.Sun
security.provider.2=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/sunpkcs11-solaris.cfg
security.provider.3=sun.security.rsa.SunRsaSign
security.provider.4=com.sun.net.ssl.internal.ssl.Provider
security.provider.5=com.sun.crypto.provider.SunJCE
security.provider.6=sun.security.jgss.SunProvider
security.provider.7=com.sun.security.sasl.Provider
| Copyright © 2010 CA. All rights reserved. | Email CA about this topic |