Security Guide for Siebel eBusiness Applications > Security Adapter Authentication > Installing LDAP Client Software >

Installing and Configuring IBM GSK iKeyMan

This section provides information about installing and configuring IBM GSK iKeyMan. This module needs to be installed only once per deployment.

Prerequisite for Running IBM GSK iKeyMan

• Java 1.3 or 1.3.1 is required for GSK iKeyMan to work properly. (IBM GSK iKeyMan does not work with Java 1.4.)

Installing IBM GSK iKeyMan

Follow the installation instructions for IBM GSKit for your platform:

• Installing the IBM LDAP Client and GSKit on Windows
• Installing the IBM LDAP Client and GSKit on Solaris
• Installing the IBM LDAP Client and GSKit on AIX
• Installing the IBM LDAP Client and GSKit on HP-UX

Enabling CMS Capability for IBM GSK iKeyMan

Perform the following procedure before you start the GSK iKeyMan GUI.

To set up GSK iKeyMan to support CMS key databases

1. Install IBM or an equivalent JDK 1.3 or 1.3.1.
2. Set JAVA_HOME to point to the directory where JDK 1.3 is installed. For example:
   • On Windows, set JAVA_HOME=C:\Progam Files\IBM\Java13.
   • On UNIX, export JAVA_HOME=/usr/opt/IBMJava13.

     NOTE:  Java requirements for Siebel high interactivity clients on Microsoft Windows platforms are incompatible with the above setting. If you need to run both Siebel client software and IBM GSK iKeyMan on the same machine, you may need to reset the Java settings after each use of IBM GSK iKeyMan. For more information about Java requirements for Siebel high interactivity clients, see browser configuration information in Siebel System Administration Guide.

3. Remove the gskikm.jar and ibmjcaprovider.jar files from your ${JAVA_HOME}/jre/lib/ext directory.
4. Be sure that ${JAVA_HOME}/jre/lib/ext has the following jar files:

   ibmjceprovider.jar

   ibmpkcs.jar

   ibmjcefw.jar

   local_policy.jar

   US_export_policy.jar

   ibmjlog.jar

   NOTE:  IBM GSKit includes the above jar files, and ibmjsse.jar, in the GSKit installation path. The files are located at GSK_installation_directory\classes\jre\lib\ext. Copy the GSKit jar files to ${JAVA_HOME}/jre/lib/ext.

5. Register IBM JCE and IBM CMS service providers:

   Update the ${JAVA_HOME}/jre/lib/security/java.security file to add the IBMJCE provider and IBMCMS provider after the Sun provider. For example:

   "security.provider.1=sun.security.provider.Sun

   "security.provider.2=com.ibm.spi.IBMCMSProvider

   "security.provider.3=com.ibm.crypto.provider.IBMJCE

   A sample java.security file for GSKit users can be found in GSK_installation_directory\classes\gsk_java.security.