Breadcrumbs

JAVA Installation and Configuration

Installing JAVA

  1. (Optional) It is recommended to update the system with latest security patch.

›_ Console 

# dnf -y update

  1. Download and extract Oracle OpenJDK 8.

›_ Console 

# cd /opt 

# tar -xvf jdk-8u202-linux-x64.tar.gz

Update java.security file to use Utimaco HSM

  1. Copy the file CryptoServerJCE.jar for JAVA 8 from /opt/utimaco/lib/ to <javahome>/lib/ext.

›_ Console 

# cp /opt/utimaco/lib/CryptoServerJCE.jar /opt/jdk1.8.0_202/jre/lib/ext/

  1. Go to the <JDK_Installation_directory>/jre/lib/security directory.

›_ Console 

# cd /opt/jdk1.8.0_202/jre/lib/security/

  1. Edit the java.security configuration file to add provider as highlighted below.

java.security

 
security.provider.1=sun.security.provider.Sun security.provider.2=sun.security.rsa.SunRsaSign security.provider.3=sun.security.ec.SunEC 

security.provider.4=com.sun.net.ssl.internal.ssl.Provider security.provider.5=com.sun.crypto.provider.SunJCE security.provider.6=sun.security.jgss.SunProvider security.provider.7=com.sun.security.sasl.Provider security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI security.provider.9=sun.security.smartcardio.SunPCSC 

security.provider.10=CryptoServerJCE.CryptoServerProvider /home/ jboss /CryptoServer.cfg

Specify correct provider number and path for CryptoServerJCE Provider.