Breadcrumbs

Update java.security file to use Utimaco HSM on Linux

  1. Go to the <JDK_Installation_directory>/jre/lib/security directory.

›_ Console 

# cd /opt/IBM/WebSphere/AppServer_1/java/8.0/jre/lib/security/java.security

  1. Edit the java.security configuration file to add IBMPKCS11Impl provider as highlighted below.

›_ Console 

security.provider.1=com.ibm.jsse2.IBMJSSEProvider2 
security.provider.2=com.ibm.crypto.plus.provider.IBMJCEPlus 
security.provider.3=com.ibm.crypto.provider.IBMJCE 
security.provider.4=com.ibm.security.jgss.IBMJGSSProvider 
security.provider.5=com.ibm.security.cert.IBMCertPath 
security.provider.6=com.ibm.security.sasl.IBMSASL 
security.provider.7=com.ibm.xml.crypto.IBMXMLCryptoProvider 
security.provider.8=com.ibm.xml.enc.IBMXMLEncProvider 
security.provider.9=com.ibm.security.jgss.mech.spnego.IBMSPNEGO 
security.provider.10=sun.security.provider.Sun 
security.provider.11=com.ibm.crypto.pkcs11impl.provider.IBMPKCS11Impl /etc/utimaco/pkcs11.cfg

Specify correct provider number and path for pkcs11.cfg file.