Ubisecure CustomerID requires that a correct version of Java Runtime Environment (JRE) for Servers is available on the server on which Ubisecure CustomerID will be installed. The Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files are also required to be included in the Java installation. Please check the Java installation based on requirements mentioned in chapter 1.1.
If you haven't done so already during Java installation, make sure you have the following environment variables set related to Java. The values below are just examples. Modify the paths according to your Java installation.
Set JAVA_HOME environment variable to
/usr/local/java/jdk1.8.0_121
Set JRE_HOME environment variable to
/usr/local/java/jdk1.8.0_121/jre
Additional SSL Considerations
Ubisecure CustomerID can be configured to make calls to third-party software during the user registration workflows. Typically data entered by the user is verified against a CRM or other backend service to determine which access rights a user should be automatically given based on an existing service agreement.
If you plan to use back channel connections from Ubisecure CustomerID over SSL encrypted connections, you will have to add each server's public key to the Server JRE's cacerts file. You can find the cacerts file under ${JRE_HOME}/lib/security/cacerts. Once you have downloaded the server's public key, you can add it to the key store with the following commands:
cd ${JRE_HOME}/lib/security
${JAVA_HOME}/bin/keytool -importcert -trustcacerts -alias "<descriptive alias here>" .keystore cacerts -storepass changeit -file C:\path\to\certificate.cer
These commands can also be run at a later stage when third-party backend services are added to user registration workflows.