Symptom
During system provisioning scenarios of NetWeaver Java 7.50 SP0, S/4HANA 1709 Java stack and S/4HANA 1809 Java stack, SWPM fails with the following exception:
Execute step runUMConfigurator of component |NW_Java_OneHost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|onehost|0|NW_CI_Instance|ind|ind|ind|ind|ci|0|NW_CI_Instance_Configure_Java|ind|ind|ind|ind|javaconfig|0|NW_UME_Configuration|ind|ind|ind|ind|ume|0|NW_UME_Configuration_Standalone|ind|ind|ind|ind|standalone|0
...
[EXCEPTION]
Caused by: com.sap.security.core.server.secstorefs.NoEncryptionException: Encryption or decryption is not possible because the full version of the SAP Java Crypto Toolkit was not found (iaik_jce.jar is required, iaik_jce_export.jar is not sufficient) or the JCE Jurisdiction Policy Files don't allow the use of the "PbeWithSHAAnd3_KeyTripleDES_CBC" algorithm.
...
Caused by: java.lang.SecurityException: JCE cannot authenticate the provider IAIK
...
Caused by: java.util.jar.JarException: jar:file:////<hostName>/sapmnt/<SID>/SYS/global/security/lib/tools/iaik_jce.jar!/ has unsigned entries - iaik/asn1/ASN.class
...
And/or NetWeaver Java engine is fails to start with the following stack trace in the log_bootstrap.0.log
[TIMESTAMP] Exception occurred for component [internal/unkown] of type [unkown]
com.sap.engine.bootstrap.SynchronizationException: Storage access initialization failed due to OpenSQL error.Check if your db driver file is available on the file system or if the user has correct permissions for that file
...
----------==[ Caused by: ]==----------
com.sap.engine.frame.core.configuration.ConfigurationException: Error while connecting to DB.
...
Caused by: com.sap.sql.log.OpenSQLException: Error while accessing secure store: Encryption or decryption is not possible because the full version of the SAP Java Crypto Toolkit was not found (iaik_jce.jar is required, iaik_jce_export.jar is not sufficient) or the JCE Jurisdiction Policy Files don't allow the use of the "PbeWithSHAAnd3_KeyTripleDES_CBC" algorithm..
...
Caused by: com.sap.security.core.server.secstorefs.NoEncryptionException: Encryption or decryption is not possible because the full version of the SAP Java Crypto Toolkit was not found (iaik_jce.jar is required, iaik_jce_export.jar is not sufficient) or the JCE Jurisdiction Policy Files don't allow the use of the "PbeWithSHAAnd3_KeyTripleDES_CBC" algorithm.
...
Caused by: java.lang.SecurityException: JCE cannot authenticate the provider IAIK
...
Caused by: java.util.jar.JarException: jar:file:///<DriveLetter>:/usr/sap/<SID>/SYS/global/security/lib/tools/iaik_jce.jar!/ has unsigned entries - iaik/asn1/ASN.class
Read more...
Environment
- SAP NetWeaver 7.50 Application Server Java, SP0
- SAP S/4HANA 1709, Java stack
- SAP S/4HANA 1809, Java stack
Product
Keywords
KBA , BC-INS-SWPM , Installation with Software Provisioning Manager , BC-JVM , SAP Java Virtual Machine , BC-JAS-SEC , Security, User Management , BC-JAS-COR , Enterprise Runtime, Core J2EE Framework , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.