Installation Guide › Configuring the Server Post Installation › Optional Configuration Procedures › How To Enable FIPS 140-2 Encryption › Install Java components for FIPS on JBoss/Windows Servers

Install Java components for FIPS on JBoss/Windows Servers

Download and install Java Cryptography Extension (JCE) to support FIPS encryption algorithms.

Note: When you implement the CA RCM server using the WebSphere application server on AIX, install a different package. For assistance, contact CA Support at http://ca.com/support.

When you implement the CA RCM server on a JBoss cluster, install JCE on each server in the cluster. You can install JCE on the initial server image before you create the cluster, or repeat this procedure on each server of an existing cluster.

To install Java components for FIPS on JBoss/Windows servers

1. Browse to the following directory on the CA RCM server:

   Java_home/lib/security
   

   Note: Java_home is the local home directory of the Java version the CA RCM server uses

2. Back up or rename the following files in this directory:
   • local_policy.jar
   • US_export_policy.jar
3. Browse to the Sun Microsystems Developer Network site.
4. Download the Java(TM) Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 5.0 package to the CA RCM server. This package is provided in a file named jce_policy-1_5_0.zip.
5. Unzip the file.

   A new directory named \jce is created. Files are extracted to this directory.

6. Browse to this \jce directory.
7. Copy the following files:
   • local_policy.jar
   • US_export_policy.jar
8. Paste these files in the following directory:

   Java_home/lib/security
   

9. In a clustered installation, repeat this procedure on each server in the cluster.