Search code examples
javaibm-mqfips

How to set Oracle JDK support FIPS mode

Currently. I have to create client application to connect IBM MQ server which only support TLS. After google a lot. I know the JDK used have to support FIPS.

Any one can help with how to set it up on Linux server?

Solution

  • You're right. FIPS is not supported as default in Oracle JDK.

    1. Download JCE from http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html
    2. Put the extracted jars to %JAVA_HOME%/jre/lib/security. But these jars are just interface.
    3. Install NSS as an FIPS implementation.
    4. Change your java.security provider to it.

    Or you can switch to use IBM SDK will is easy to config FIPS mode, Details please refer to IBM knowledge center.