Federation › Policy Server and Web Agent Option Pack Guide › Policy Server Option Pack Installation and Uninstallation › Solaris 10 Setup Requirement for the Policy Server Option Pack

Solaris 10 Setup Requirement for the Policy Server Option Pack

A setup requirement exists for a Policy Server Option Pack running on a Solaris 10 system. If the default PKCS11 security provider is listed before the Sun security provider in the java.security properties file, the Policy Server Option Pack cannot execute encryption and decryption properly.

To solve this problem, list the Sun provider (sun.security.provider.Sun) before the PKCS11 provider (sun.security.pkcs11.SunPKCS11) in the java.security properties file. The properties file is located in the lib/security directory of the JDK installation.

Modify the java.security file as follows:

security.provider.1=sun.security.provider.Sun

security.provider.2=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/sunpkcs11-solaris.cfg

security.provider.3=sun.security.rsa.SunRsaSign

security.provider.4=com.sun.net.ssl.internal.ssl.Provider

security.provider.5=com.sun.crypto.provider.SunJCE

security.provider.6=sun.security.jgss.SunProvider

security.provider.7=com.sun.security.sasl.Provider