Skip to main content

Memory requirement for ISKLM


Technote (FAQ)


Question

What are the memory requirements to run ISKLM on z/OS?

Cause

Out of memory errors can occur in ISKLM while loading a keystore containing a large number of keys.

The error will be similar to this:

JVMDUMP013I Processed dump event "systhrow", detail "java/lang/OutOfMemoryError"
.
Exception in thread "main" java.lang.OutOfMemoryError
at com.ibm.crypto.provider.JceKeyStore.engineLoad(Unknown Source)
at java.security.KeyStore.load(KeyStore.java:1173)


Answer

To resolve the problem you might increase the heap size value.

ISKLM uses the default Java heap size value.

For example:
Default Java heap size for z/OS and Java 6:
http://public.dhe.ibm.com/common/ssi/ecm/en/zsl03071usen/ZSL03071USEN.PDF

"Maximum Java heap size. Use -Xmx<size>

Half the available memory with a minimum of 16 MB and a maximum of 512 MB"

Additional memory may be needed when the keystore contains a large number of keys and the Java heap is not not large enough to hold the keystore. The needed size will vary as the number of keys do.

This heap size value can be modified by using the environment variable IBM_JAVA_OPTIONS
Example:
IBM_JAVA_OPTIONS=“-Xmx512M“

Product Alias/Synonym

ISKLM
EKM

Rate this page:

(0 users)Average rating

Copyright and trademark information

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Rate this page:


(0 users)Average rating

Add comments

Document information

IBM Security Key Lifecycle Manager for z/OS


Software version:
1.1.0


Operating system(s):
z/OS


Reference #:
1613502


Modified date:
2012-10-09

Translate my page

Content navigation