IBM Support

Memory requirement for ISKLM

Question & Answer


Question

What are the memory requirements to run ISKLM on z/OS?

Cause


Out of memory errors can occur in ISKLM while loading a keystore containing a large number of keys.

The error will be similar to this:

JVMDUMP013I Processed dump event "systhrow", detail "java/lang/OutOfMemoryError"
.
Exception in thread "main" java.lang.OutOfMemoryError
at com.ibm.crypto.provider.JceKeyStore.engineLoad(Unknown Source)
at java.security.KeyStore.load(KeyStore.java:1173)

Answer


To resolve the problem you might increase the heap size value.

ISKLM uses the default Java heap size value.

For example:
Default Java heap size for z/OS and Java 6:

"Maximum Java heap size. Use -Xmx<size>

Half the available memory with a minimum of 16 MB and a maximum of 512 MB"

Additional memory may be needed when the keystore contains a large number of keys and the Java heap is not not large enough to hold the keystore. The needed size will vary as the number of keys do.

This heap size value can be modified by using the environment variable IBM_JAVA_OPTIONS
Example:
IBM_JAVA_OPTIONS=“-Xmx512M“

[{"Product":{"code":"SSAMDD","label":"IBM Security Key Lifecycle Manager for z\/OS"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF035","label":"z\/OS"}],"Version":"1.1.0","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Product Synonym

ISKLM;EKM

Document Information

Modified date:
16 June 2018

UID

swg21613502