Comments on: as400 upgrade from v5r3 to v5r4 http://itknowledgeexchange.techtarget.com/itanswers/as400-upgrade-from-v5r3-to-v5r4/ Wed, 22 May 2013 12:21:28 +0000 hourly 1 By: dand http://itknowledgeexchange.techtarget.com/itanswers/as400-upgrade-from-v5r3-to-v5r4/#comment-62289 dand Wed, 15 Apr 2009 18:07:05 +0000 #comment-62289 We’ve had an issue on two systems now where Customized Java servers needed to have permissions tabs added back in. This is an example of one:

/QIBM/ProdData/OS400/Java400/jdk/lib/security/java.security
added security provider com.sun.crypto.provider.SunJCE

for example:
# List of providers and their preference orders (see above):
#
security.provider.1=sun.security.provider.Sun
security.provider.2=com.sun.rsajca.Provider
security.provider.3=com.sun.crypto.provider.SunJCE

/QIBM/ProdData/OS400/Java400/jdk/lib/security/java.policy
added Sun JCE permissions

added the following entry to the end of the file:
// Sun JCE permissions
grant codeBase “file:/QIBM/ProdData/Java400/ext/sunjce_provider.jar” {
permission java.io.FilePermission
“/QIBM/ProdData/java400/ext/jce1_2_2.jar”, “read”;
permission java.lang.RuntimePermission
“getProtectionDomain”;
permission java.security.SecurityPermission
“putProviderProperty.SunJCE”;
};

If it is third party software your vendor should be aware of this, so check with any vendors running Java code, particularly with encryption.

]]>