Configuration Guide › Security and Permissions › How To Enable FIPS 140-2 Encryption › Install Java Components for FIPS on JBoss/Windows Servers

Install Java Components for FIPS on JBoss/Windows Servers

Download and install Java Cryptography Extension (JCE) to support FIPS encryption algorithms.

Note: When you implement the CA GovernanceMinder server using the WebSphere application server on AIX, install a different package.

When you implement the CA GovernanceMinder server on a JBoss cluster, install JCE on each server in the cluster. You can install JCE on the initial server image before you create the cluster, or repeat this procedure on each server of an existing cluster.

To install Java components for FIPS on JBoss/Windows servers

1. Browse to the following directory on the CA GovernanceMinder server:

   Java_home/lib/security
   

   Note: Java_home is the local home directory of the Java version the CA GovernanceMinder server uses

2. Back up or rename the following files in this directory:
   • local_policy.jar
   • US_export_policy.jar
3. Browse to the Oracle Software Downloads site.
4. Download the Java(TM) Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 5.0 package to the CA GovernanceMinder server. This package is provided in a file named jce_policy-1_5_0.zip.
5. Unzip the file.

   A new directory named \jce is created. Files are extracted to this directory.

6. Browse to this \jce directory.
7. Copy the following files:
   • local_policy.jar
   • US_export_policy.jar
8. Paste these files in the following directory:

   Java_home/lib/security
   

9. In a clustered installation, repeat this procedure on each server in the cluster.

   Java components for FIPS on JBoss/Windows servers are installed.