All,

Since we are on the topic of EKM today, I am wondering of anyone has
written a SMPE based USERMOD for USS based customizations.  

For example, for our EKM implementation, it is necessary to modify files
that live in the SMPE installed JAVA filesystem:


1)      Add JAVA Hardware provider

                In  /usr/lpp/java/J5.0/lib/security/java.security update
the "List of providers" to be 

                security.provider.1=com.ibm.jsse2.IBMJSSEProvider2
        
security.provider.2=com.ibm.crypto.hdwrCCA.provider.IBMJCECCA
                security.provider.3=com.ibm.crypto.provider.IBMJCE
        
security.provider.4=com.ibm.security.jgss.IBMJGSSProvider
                security.provider.5=com.ibm.security.cert.IBMCertPath
                security.provider.6=com.ibm.security.sasl.IBMSASL



2)      Copy the unrestricted policy files

                US_export_policy.jar 
                local_policy.jar 

                # cp
/usr/lpp/java/J5.0/demo/jce/policy-files/unrestricted/*
/opt/fitb/ekm/java/lib/security


Today, I carry along a stand alone copy of the JAVA filesystem that I
manually maintain.  It would be nice to not have to do that. 

Any ideas?
                

_________________________________________________________________
Dave Jousma
Assistant Vice President, Mainframe Services
[email protected]
1830 East Paris, Grand Rapids, MI  49546 MD RSCB1G
p 616.653.8429
f 616.653.8497


This e-mail transmission contains information that is confidential and may be 
privileged.
It is intended only for the addressee(s) named above. If you receive this 
e-mail in error,
please do not read, copy or disseminate it in any manner.  If you are not the 
intended 
recipient, any disclosure, copying, distribution or use of the contents of this 
information
is prohibited. Please reply to the message immediately by informing the sender 
that the 
message was misdirected. After replying, please erase it from your computer 
system. Your 
assistance in correcting this error is appreciated.




----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to