IBM security support for the Small Footprint JRE (Linux only)

IBM provides a range of security providers that implement various security algorithms and mechanisms. To minimize the disk and memory footprint, the following functions are removed from the runtime environment:

Security policy file creation and management tool

bin/policytool

iKeyman command-line utility

bin/ikeycmd

iKeyman utility (graphical user interface)

bin/ikeyman

PKI Certificate Management Protocols implementation

lib/ext/CmpCrmf.jar

JNDI implementation for Domain Name Service look-up

lib/ext/dnsns.jar

IBM Certificate Management

lib/ext/ibmcmsprovider.jar

IBM JCE FIPS certified cryptographic algorithms

lib/ext/ibmjcefips.jar

IBM Key Certificate Management

lib/ext/ibmkeycert.jar

IBM PKCS11# implementation provider

lib/ext/ibmpkcs11impl.jar

PKCS key management

lib/ext/gskikm.jar

IBM Simple Authentication and Security Layer (SASL) provider

lib/ext/ibmsaslprovider.jar

IBM XML cryptography

lib/ext/ibmxmlcrypto.jar

IBM XML security

lib/ext/ibmxmlencprovider.jar

XML encryption

lib/ext/xmlencfw.jar

If you require one of these security providers, you can customize the runtime environment by packaging extra files in a resources folder.