Update java.security file to Use Utimaco HSM for JDK8

  1. Go to the <JDK_Installation_directory>/jre/lib/security directory.

›_ Console

# cd /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.232.b092.el8_1.x86_64/jre/lib/security/ 
  1. Edit the java.security configuration file to add SunPKCS11 provider as highlighted below.

›_ Console

security.provider.1=sun.security.provider.Sun security.provider.2=sun.security.rsa.SunRsaSign security.provider.3=sun.security.ec.SunEC 

security.provider.4=com.sun.net.ssl.internal.ssl.Provider security.provider.5=com.sun.crypto.provider.SunJCE security.provider.6=sun.security.jgss.SunProvider security.provider.7=com.sun.security.sasl.Provider security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI security.provider.9=sun.security.smartcardio.SunPCSC 

security.provider.10=sun.security.pkcs11.SunPKCS11 /etc/utimaco/pkcs11.cfg 

Specify correct provider number and path for pkcs11.cfg file.