How to Check for the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files.

Products

• Mail Security for Domino

Issue/Introduction

The Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files are a required component for Java LiveUpdate to run with Symantec Mail Security for Domino 8.0. Java LiveUpdate may exhibit abnormal behavior without the JCE installed.

Symptoms

• Java LiveUpdate fails.
• Unable to access the configuration utility
• Java LiveUpdate downloads folder larger than 2gb.
• Zero Byte liveupdate.conf

Resolution

Download the Java Cryptography Extension (JCE) from http://www.oracle.com/technetwork/java/javase/downloads/index.html

1. Compare policy file sizes
The policy files with the JCE are slightly different than the ones included with Java.

Compare the policy file sizes of what is downloaded from Oracle to those in the Java lib folder to the ones downloaded with the JCE. If the sizes are not the same the JCE is not installed.

Example: 

• Default Location
  <java-home>/lib/security   (Unix)
  <java-home>\lib\security   (Windows)
   
• Typlcal Windows 32 bit Operating Systems
  C:\program files\java\jre6\lib\security\US_export_policy.jar
  C:\program files\java\jre6\lib\security\local_policy.jar
   
• Typical Windows 64 bit Operating Systems
  C:\program files (x86)\java\jre6\lib\security\US_export_policy.jar
  C:\program files (x86)\java\jre6\lib\security\local_policy.jar
   
• For information to locate the JAVA path within the Operating System used, please review the following:
  http://www.java.com/en/download/help/path.xml

2. Compare MD5 hash of the policy files.
Compare the policy file hashs values (MD5, SHA1, CRC32, etc) to those from the JCE. The JCE policy file size and hash data is not published here because it may change when Oracle updates Java or releases a new JCE.

3. Check liveupdt.log file
The liveupdt.log file contains the following lines:
<date & time> IdsEncodingFailed
<date & time> IdsCheckJCEPolicyFiles
<date & time> IdsEncodingFailed
<date & time> IdsCheckJCEPolicyFiles

The above is an indication the JCE files are missing. 

Note: If the JCE was not installed at the time of installation of Symantec Mail Secuirty for Domino. Please follow the following article:
LiveUpdate Does Not Work With SMSDOM 8.x.