000031415 - Error message "java.security.InvalidKeyException: Illegal key size" in RSA Data Loss Prevention Enterprise Manager

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Jan 27, 2018
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000031415
Applies ToRSA Product Set: Data Loss Prevention
RSA Product/Service Type: Enterprise Manager
Platform: Windows Server 2008R2/2012
Issue
  • The Enterprise Coordinator can't communicate with the Enterprise Manager.
  • The Root Endpoint Coordinator can't communicate with the Enterprise Manager. 
  • The following errors are seen:

29 Sep 2015 16:16:06,593 | ERROR - HttpChannel.sendViaClient(144) | javax.net.ssl.SSLException: java.security.InvalidKeyException: Illegal key size
29 Sep 2015 16:16:06,593 | ERROR - PrivateConnectorClientServiceImpl.logTransmissionError(232) | FunctionalFlow - alert config Unable to transmit alert config to web service endpoint rsadlpec.xxxxxxx.xxxxx.com. Reason is Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.
29 Sep 2015 16:16:06,593 | ERROR - LoggingAsynchronousExceptionListener.onEvent(39) | Asynchronous exception occurred processing event continuation: Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.
29 Sep 2015 16:16:06,593 | ERROR - EMApplicationEventMulticaster$1.run(180) | Unexpected exception occurred during event processing: Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.; job is recoverable and will be retried
CauseThe error is caused when out-of-date local_policy.jar and US_export_policy.jar files are installed.
ResolutionTo resolve this issue, replace the local_policy.jar and US_export_policy.jar with the unlimited java JCE files located in C:\Program Files\Java\jre1.7.0_25\lib\security, using the steps below:

  1. Download the updated local_policy.jar and US_export_policy.jar files from Oracle Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7 Download page.
  2. Move the two files of that name that are in C:\Program Files\Java\jre1.7.0_25\lib\security to a backup folder.
  3. Replace the files with the unlimited local_policy.jar and the US_export_policy.jar files downloaded from the Oracle website.
  4. Restart the EM service.

Attachments

    Outcomes