CA Identity Governance Configuration Guide › Security and Permissions › How To Enable FIPS 140-2 Encryption › Install Java Components for FIPS on JBoss/Windows Servers

Install Java Components for FIPS on JBoss/Windows Servers

Download and install Java Cryptography Extension (JCE) to support FIPS encryption algorithms.

Note: When you implement the CA Identity Governance server using the IBM WebSphere application server on AIX, install a different package.

When you implement the CA Identity Governance server on a JBoss cluster, install JCE on each server in the cluster. You can install JCE on the initial server image before you create the cluster, or can repeat this procedure on each server of an existing cluster.

Follow these steps:

1. Browse to the following directory on the CA Identity Governance server:

   Java_home/lib/security
   

   Note: Java_home is the local home directory of the Java version the CA Identity Governance server uses.

2. Back up or rename the following files in this directory:
   • local_policy.jar
   • US_export_policy.jar
3. Browse to the Oracle Software Downloads site.
4. Download the Java(TM) Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files v6 package to the CA Identity Governance server.

   This package is provided in a file named jce_policy-6.zip.

5. Unzip the file.

   A new directory named \jce is created. Files are extracted to this directory.

6. Browse to this \jce directory, and copy the following files:
   • local_policy.jar
   • US_export_policy.jar
7. Paste these files in the following directory:

   Java_home/lib/security
   

8. In a clustered installation, repeat this procedure on each server in the cluster.

   Java components for FIPS on JBoss/Windows servers are installed.