IBM Support

Setting up Java for EKM (Encryption Key Manager)

Troubleshooting


Problem

This document explains now to configure Java J2SE 5.0 for EKM.

Resolving The Problem

EKM is part of the IBM Java environment. It allows specific tape drives to encrypt the data that is written to tape. Java Platform, Standard Edition (J2SE) 5.0 is required. The details below show how Java must be installed and configured for EKM. Therefore, for V5R3 5722JV1 Option 7 is required, and for V5R4, V6R1, and V7R1 57xxV1 Option 8 is required. The latest Java group PTF is recommended, and the user must also add the following:

To run EKM on V5R3 requires the following:

o5722JV1 Option 7.
oGroup PTF SF99269-13 or higher must be installed.
oThe /QIBM/ProdData/Java400/jdk15/lib/security/java.security file must be modified to include these providers:

security.provider.6=com.ibm.jsse2.IBMJSSEProvider2
security.provider.7=com.ibm.i5os.jsse.JSSEProvider

Note: The number specified (security.provider.6) is dependent on what numbers are already specified in the file.
To run EKM on V5R4, V6R1, and VV7R1 requires the following:
o57xxJV1 Option 8.
oLatest Java Group PTF is applied, V5R4 = SF99291; V6R1=SF99562; V7R1=SF99572
oThe /QOpenSys/QIBM/ProdData/JavaVM/jdk50/32bit/jre/lib/security/java.security file must be modified to include these providers:

security.provider.1=com.ibm.jsse2.IBMJSSEProvider2
security.provider.6=com.ibm.i5os.jsse.JSSEProvider

Note: The number specified (security.provider.1) is dependent on what numbers are already specified in the file.
Following is a link to the user's guide, if required:

http://publibfp.boulder.ibm.com/epubs/pdf/a7604188.pdf

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"6.1.0"}]

Historical Number

434425559

Document Information

Modified date:
18 December 2019

UID

nas8N1014631