Memory requirement for ISKLM

Technote (FAQ)


Question

What are the memory requirements to run ISKLM on z/OS?

Cause


Out of memory errors can occur in ISKLM while loading a keystore containing a large number of keys.

The error will be similar to this:

JVMDUMP013I Processed dump event "systhrow", detail "java/lang/OutOfMemoryError"
.
Exception in thread "main" java.lang.OutOfMemoryError
at com.ibm.crypto.provider.JceKeyStore.engineLoad(Unknown Source)
at java.security.KeyStore.load(KeyStore.java:1173)


Answer

To resolve the problem you might increase the heap size value.

ISKLM uses the default Java heap size value.

For example:
Default Java heap size for z/OS and Java 6:
http://public.dhe.ibm.com/common/ssi/ecm/en/zsl03071usen/ZSL03071USEN.PDF

"Maximum Java heap size. Use -Xmx<size>

Half the available memory with a minimum of 16 MB and a maximum of 512 MB"

Additional memory may be needed when the keystore contains a large number of keys and the Java heap is not not large enough to hold the keystore. The needed size will vary as the number of keys do.

This heap size value can be modified by using the environment variable IBM_JAVA_OPTIONS
Example:
IBM_JAVA_OPTIONS=“-Xmx512M“

Product Alias/Synonym

ISKLM
EKM

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

IBM Security Key Lifecycle Manager for z/OS

Software version:

1.1.0

Operating system(s):

z/OS

Reference #:

1613502

Modified date:

2012-10-09

Translate my page

Machine Translation

Content navigation