Installing Unlimited Jurisdiction Files

Java vendors ship a default set of policy files that do not permit unlimited strength cryptography. In countries exempt from these restrictions, an unlimited strength set of these policy files can be downloaded and installed. The default set of policy files typically restricts usage of 192-bit AES, 256-bit AES.

Follow these steps to install the unlimited strength policy files on nodes where such key lengths for symmetric (bulk) ciphers are required:

Procedure

  1. Download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files from the JRE vendor.
  2. Back up the files located in TIBCO_HOME/tibcojre/jre_version/lib/security.
  3. Extract the files you downloaded to TIBCO_HOME/tibcojre/jre_version/lib/security
  4. Restart the node and the TIBCO Host instance.