JCE Unlimited Strength file must match the JDK (vendor and version).
search cancel

JCE Unlimited Strength file must match the JDK (vendor and version).


Article ID: 36534


Updated On:


CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On



JCE Unlimited Strength file must match the JDK


As documented, Identity Manager requires the JCE Unlimited Strength for integration with SiteMinder.

Customers many times run into a mistake where they install or deploy JCE files that aren't matching their Java Virtual Machine.

The JCE Unlimited Strength files must match both the vendor and the version of the JVM that's running Identity Manager to meet the requirement.


Required upon integration with SiteMinder.


Release: CAIDMB99000-12.6.7-Identity Manager-B to B


Usually JBoss is running Oracle Sun Java. In these cases you need to know the java version and download the JCE files from Oracle Sun Java site and follow their installation/deployment instructions.


However, with Web Sphere customers usually are more prone to errors. First, Identity Manager supports web sphere with either Oracle Sun Java or IBM Java. Most customers use IBM Java since it's more native to Web Sphere. Whatever your choice is (and make sure it is supported with your Identity Manager version per our support matrix - listed and available on our support site), you must make sure to get the JCE files of that specific JVM version from that specific vendor. Many times customers are downloading Oracle Sun Java unlimited strength JCE files despite that their web sphere is using IBM java. This can not and will not work.

Usually, customers are less aware of IBM Java's unrestricted JCE files. Here is a link where you can download it:
IBM Unrestricted SDK JCE policy files 2015/08/11 11:39:50