KB Article | Forcepoint Support

Problem Description

The Webstart client fails to connect to the Management server using 256-bit encryption when the Java JCE Unlimited Strength Jurisdiction Policy Files extension is not available.

Note Starting with v5.9.2, SMC will display the reason for the login failure.

Starting with v6.2.2 the displayed message is:

"Your local Java installation does not have the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files extension enabled."

Resolution

Starting from SMC 6.3.2 version the Java jurisdiction policy files that are required for Webstart Management Clients to connect to Management Servers that use 256-bit encryption are included. Java version 1.8.0_151 is required on the computer where you use the Webstart Management Client.

Workaround

For Microsoft Windows:
  1. Download the Java cryptography extension:
    1. JCE 8
    2. JCE 7
  2. Extract the download to $JAVA_HOME/jre/lib/security.
    1. Typically C:\Program Files\Java\jre1.8.0_x\lib\security).
  3. To install the package, follow the instructions in the JCE package Readme.txt.
For Linux:

Use the operating system tools to install the Java cryptography extension. For example, for Ubuntu:
  1. Open a command-line session.
  2. Type apt-get install oracle-java8-unlimited-jce-policy and press Enter.
For macOS:

To download and extract the correct Java cryptography extension:
  1. Select System Preferences, click Java.
  2. On the General tab, click About.
    1. Check the java version currently installed.
  3. Download the matching JCE package and unzip it:
    1. JCE 8
    2. JCE 7
  4. Select System Preferences, click Java.
  5. On the Java tab, click View to view the current path for the installation.
  6. Copy the path.
  7. Open Finder, and select Go, and Go To Folder.
  8. Paste the path from the step 6, replacing /bin/java at the end with /lib/security.
  9. Back up the files local_policy.jar and US_export_policy.jar.
  10. Overwrite local_policy.jar and US_export_policy.jar using the versions in the extracted JCE package.
  11. Open Webstart.
Note Webstart is the only client option on macOS.

Article Feedback



Thank you for the feedback and comments.

Want 24/7 Tech Support?

Learn more