Ubisecure CustomerID requires that a the correct version versions of:
- Java Runtime Environment (JRE) for Servers
...
- The Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files
...
- to be included in the Java installation
...
Please check the Java installation based on requirements mentioned in CustomerID Installation And and (Upgradeupgrade) Requirementsrequirements - CustomerID.
If you haven't done so already during Java installation, make sure you have the following environment variables set related to Java. The values below are just examples. Modify the paths according to your Java installation.
Set JAVA_HOME environment variable to /usr/local/java/jdk1.8.0_144
Set JRE_HOME environment variable to /usr/local/java/jdk1.8.0_144/jre
Additional SSL Considerations
Ubisecure CustomerID can be configured to make calls to third-party software during the user registration workflows. Typically data entered by the user is verified against a CRM or other backend service to determine which access rights a user should be automatically given based on an existing service agreement.
If you plan to use back channel connections from Ubisecure CustomerID over SSL encrypted connections, you will have to add each server's public key to the Server JRE's cacerts file. You can find the cacerts file under ${JRE_HOME}/lib/security/cacerts. Once you have downloaded the server's public key, you can add it to the key store with the following commands:
| Code Block | ||||
|---|---|---|---|---|
| ||||
cd ${JRE_HOME}/lib/security
${JAVA_HOME}/bin/keytool -importcert -trustcacerts -alias "<descriptive alias here>" .keystore cacerts -storepass changeit -file C:\path\to\certificate.cer |
...