CA SSO R12.52 Unable to connect to LunaSafenet Hardware Security Module(hsm) for Token Generation

book

Article ID: 120659

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) AXIOMATICS POLICY SERVER CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction



I'd like us to know if Policy Server uses Java as a Service or as a
Client.

Environment

Release: MSPSSO99000-12.8-Single Sign-On-for Business Users-MSP
Component:

Resolution

Out of the box, Policy Server has its JVM set to run as a Service, as 
you'll see in the file 

{policy_server_home}/config/JVMOptions.txt 

-server 
-Xbootclasspath/p:/opt/CA/siteminder/bin/endorsed/xercesImpl.jar: 
/opt/CA/siteminder/bin/endorsed/xml-apis.jar: 
/opt/CA/siteminder/bin/endorsed/resolver.jar: 
/opt/CA/siteminder/bin/endorsed/serializer.jar 
-Xrs 
-Xms128m 
-Xmx256m 

And as stated in the following link, the choice of using java as a 
service is probably motivated by the better performances in production 
environment. 

JVM Server vs Client Mode 

"So server mode is better suited for production deployments and gives 
better performance." 

https://javapapers.com/core-java/jvm-server-vs-client-mode/