Adding CMS/KDB support for the iKeyMan utility

If you use iKeyMan to manipulate the key store, and the key store is in CMS/KDB format, complete this procedure.

About this task

Use a text editor to add com.ibm.security.cmskeystore.CMSProvider to the list of providers in the java.security file.

Procedure

  1. Navigate to the Sametime_install_root\ibm-jre\jre\lib\security directory. For example:

    AIX®: /opt/ibm/lotus/notes/latest/ibmpow/ibm-jre/jre/lib/security

    Linux™: /opt/ibm/lotus/notes/latest/linux/ibm-jre/jre/lib/security/

    Windows™: C:\Program Files\IBM\Domino\ibm-jre\jre\lib\security

  2. Open the java.security file.
  3. In the java.security file, add the following statement to the list of security providers as shown, where number is the last sequence number in the list.
    security.provider.number=com.ibm.security.cmskeystore.CMSProvider

    The abbreviated example that follows illustrates this line added to the java.security file. Notice that the preference numbers must be in sequence:

    ## List of providers and their preference orders #
    security.provider.1=com.ibm.jsse.IBMJSSEProvider
    security.provider.2=com.ibm.crypto.provider.IBMJCE
    security.provider.3=com.ibm.security.jgss.IBMJGSSProvider
    security.provider.4=com.ibm.security.cert.IBMCertPath
    security.provider.5=com.ibm.security.cmskeystore.CMSProvider
    ...
    #
  4. Save and close the file.