Issue in JCE Jurisdiction Policy Files in EHP1 NW 7.31

[Former Member]

Dear All,

currently we are doing upgrade of NW 7.30 to EHP1 7.31

Now i am in check phase in SUM,

Issue :

i am unable to update the

          unlimited JCE policy files for SAPJVM 6.01

<!--LOGHEADER[START]/-->

<!--HELP[Manual modification of the header may cause parsing problem!]/-->

<!--LOGGINGVERSION[2.0.7.1006]/-->

<!--NAME[/oracle/A26/sapdata3/SUM/sdt/log/SUM/CHECK-CRYPTO-FILES_03.LOG]/-->

<!--PATTERN[CHECK-CRYPTO-FILES_03.LOG]/-->

<!--FORMATTER[com.sap.tc.logging.TraceFormatter(%d [%6s]: %m)]/-->

<!--ENCODING[UTF8]/-->

<!--LOGHEADER[END]/-->

Sep 29, 2013 10:21:18 AM [Info  ]: Dialog eliminator jceDialogEliminator does not allow to omit dialog PolicyFileLocationDialog

Sep 29, 2013 10:26:49 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION has been validated by validator RequiredFields.

Sep 29, 2013 10:26:49 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION is invalid according to validator CryptoFilesValidator.

Sep 29, 2013 10:28:18 AM [Info  ]: Dialog eliminator jceDialogEliminator does not allow to omit dialog PolicyFileLocationDialog

Sep 29, 2013 10:28:49 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION has been validated by validator RequiredFields.

Sep 29, 2013 10:28:49 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION is invalid according to validator CryptoFilesValidator.

Sep 29, 2013 10:28:55 AM [Info  ]: Dialog eliminator jceDialogEliminator does not allow to omit dialog PolicyFileLocationDialog

Sep 29, 2013 10:29:26 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION has been validated by validator RequiredFields.

Sep 29, 2013 10:29:26 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION is invalid according to validator CryptoFilesValidator.

Sep 29, 2013 10:29:29 AM [Info  ]: Dialog eliminator jceDialogEliminator does not allow to omit dialog PolicyFileLocationDialog

Sep 29, 2013 11:16:41 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION has been validated by validator RequiredFields.

Sep 29, 2013 11:16:41 AM [Info  ]: Process ID 147, name rm has been started.

Sep 29, 2013 11:16:41 AM [Info  ]:   Command line: rm -rf /oracle/A26/sapdata3/SUM/sdt/tmp/jce

Sep 29, 2013 11:16:41 AM [Info  ]:   Standard out: /oracle/A26/sapdata3/SUM/sdt/tmp/DeleteDir_23.OUT

Sep 29, 2013 11:16:41 AM [Info  ]: Process ID 147 has been started.

Sep 29, 2013 11:16:41 AM [Info  ]: Waiting for process ID 147, name rm to finish.

Sep 29, 2013 11:16:41 AM [Info  ]: Process ID 147, name rm has been finished, exit code 0.

Sep 29, 2013 11:16:41 AM [Info  ]: File /oracle/A26/sapdata3/SUM/sdt/tmp/jce has been deleted.

Sep 29, 2013 11:16:41 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION is invalid according to validator CryptoFilesValidator.

Sep 29, 2013 11:16:48 AM [Info  ]: Dialog eliminator jceDialogEliminator does not allow to omit dialog PolicyFileLocationDialog

Sep 29, 2013 11:17:05 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION has been validated by validator RequiredFields.

Sep 29, 2013 11:17:05 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION is invalid according to validator CryptoFilesValidator.

Sep 29, 2013 11:17:07 AM [Info  ]: Dialog eliminator jceDialogEliminator does not allow to omit dialog PolicyFileLocationDialog

Sep 29, 2013 11:17:30 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION has been validated by validator RequiredFields.

Sep 29, 2013 11:17:30 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION is invalid according to validator CryptoFilesValidator.

Sep 29, 2013 11:17:41 AM [Info  ]: Dialog eliminator jceDialogEliminator does not allow to omit dialog PolicyFileLocationDialog

Sep 29, 2013 11:18:02 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION has been validated by validator RequiredFields.

Sep 29, 2013 11:18:02 AM [Info  ]: Validatable parameter JCE/FILE/LOCATION is invalid according to validator CryptoFilesValidator.

KIndly help me on the issue

 
 
 
 
 
 
 
 
 
 
 

[Former Member · Accepted solution]

Are you sure you downloaded and use the correct version of JCE policy files?

[Former Member · Accepted solution]

Hi,

Can you please check the below details.

Note 1390477 - Additional info about the upgrade to SAP NetWeaver 7.3

Java

---------------------< D045157 FEB/29/12 >----------------------------

Adobe Document Services: Java(TM) Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files Archive

For more information about where to download the JCE unlimited strength

jurisdiction policy files from, see SAP Note 1240081./

Second thing:

"Unlimited" JCE Jurisdiction Policy files

Check the dev_server0 file in the usr/sap/<SID>/<InstanceID>/work for the path to the JVM in use

For AS Java 7.1x-7.3x systems refer to the  Java environment properties section and note the specified 'root directory'

F  ********************************************************************************
F  Java environment properties
F    root directory    : C:\usr\sap\N73\J00\exe\sapjvm_6
F    vendor            : SAP AG
F    version           : 1.6.0_17

For the JDK located in the path specified in the dev_server0 file check if full strength jurisdiction policy files are in use as described in note 739043. Both /jre/lib/security/local_policy.jar/local_policy.policy and/jre/lib/security/US_export_policy.jar/default_US_export.policy must contain the CryptoAllPermission permission in order to allow full encryption capabilities

grant {

// There is no restriction to any algorithms.

permission javax.crypto.CryptoAllPermission;

};

If the policy files do not contain this permission refer to notes 1426759 and 1240081 which detail where to acquire and install the policy files required for full cryptographic functionality

Third :

check this.

1810884 - How to find correct JDK or JVM direcotry to copy JCE Unlimited Strength Jurisdiction polic...

Thanks

Rishi Abrol

[Former Member]

Dear's,

Issue Resolved after downloading the JCE Unlimited Strength Jurisdiction policy files.