Administer > System Security > FIPS mode > Configuring FIPS mode in Service Manager > Download JCE unlimited strength policy files

Download JCE unlimited strength policy files

FIPS mode requires the use of two JCE unlimited strength policy files, provided by IBM or Oracle:

  • local_policy.jar, which is the unlimited strength local policy file
  • US_export_policy.jar, which is the unlimited strength US export policy file

Each JRE installation contains two jar files: local_policy.jar and US_export_policy.jar. To enable FIPS mode for an SM component, you need to replace these two jar files with the unlimited strength policy files. To be more specific, you need to do this for the JRE instances used by the following Service Manager (SM) components:

  • Server
  • Windows Client
  • Web Tier
  • Mobility Client
  • SRC
  • Solr Search Engine
  • Chat Server

  • Chat Service

The following table provides instructions on where to download the policy files and how to use them. You will need these files in later configuration steps.

JRE Unlimited strength policy files
IBM SDK By default, the IBM® SDK, on all platforms, provides strong but limited jurisdiction policy files. To use unlimited jurisdiction policy files by default, place the US_export_policy.jar and the local_policy.jar in the jre/lib/security/ directory of the SDK. The unlimited jurisdiction policy files are in the SDK /demo/jce/policy-files/unrestricted/ directory. You can also download them from the ibm.com® website.
Oracle JRE

To use unlimited jurisdiction policy files by default, place the US_export_policy.jar and the local_policy.jar in the jre/lib/security/ directory of your JRE. Visit the Oracle website to download the unlimited strength JCE policy files:

  • http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html (for JRE 8)
  • http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html (for JRE 7)

Next step:

Configure Java for FIPS mode