Installing unrestricted SDK JCE policy files

Use of encryption technology is controlled by United States law. IBM® Java™ Solution Developer Kits (SDKs) include strong but limited jurisdiction policy files. To support encrypted SAML assertions, with IBM QRadar®, you must first obtain the unlimited jurisdiction Java Cryptography Extension (JCE) policy files.

About this task

Important: If you are running QRadar 7.4.3 Fix Pack 5 or later, do not install these files.

Procedure

  1. Download the unrestricted Java Cryptography Extension (JCE) policy files from here:
    https://www.ibm.com/support/knowledgecenter/SSYKE2_8.0.0/com.ibm.java.security.component.80.doc/security-component/sdkpolicyfiles.html
  2. Unpack the compressed file.
    Select the following JAR files from the unrestricted folder:
    • local_policy.jar
    • US_export_policy.jar
  3. Place the files in the following directory on your QRadar Console:
    /store/configservices/staging/globalconfig/java_security
  4. On the Admin tab, click Deploy Changes.
  5. Click Advanced Settings > Restart Web Server .