Document How to Enable XML Encryption (6275563)

To enable XML encryption, perform the following steps:

1. (Optional) If you are using a JDK version earlier than JDK version 1.5:,

   1. download the Bouncy Castle JCE provider from the Bouncy Castle site (http://www.bouncycastle.org/).

      For example, for JDK version 1.4, download the bcprov-jdk14-131.jar file.

   2. Copy the file to the jdk_root\jre\lib\ext directory.

2. Download the JCE Unlimited Strength Jurisdiction Policy Files. for your version of the JDK.

   • For Sun Systems, download the files from the Sun site (http://java.sun.com) for your version of the JDK.

   • For IBM WebSphere, go to the corresponding IBM site to download the required files.

3. Copy the downloaded US_export_policy.jar and local_policy.jar files to the jdk_root\jre\lib\security directory.

4. If you are using a JDK version earlier than JDK 1.5, edit the jdk_root\jre\lib\security\java.security file and add Bouncy Castle as one of the providers. For example:

   security.provider.6=org.bouncycastle.jce.provider.BouncyCastleProvider

5. Set the following property in the AMConfig.properties file to true:

   com.sun.identity.jss.donotInstallAtHighestPriority=true

6. Restart the Access Manager web container.

For more information, refer to problem ID 5110285 (XML encryption requires Bouncy Castle JAR file).