Migrate unrestricted jurisdiction policy files, local_policy.jar and US_export_policy.jar

We can migrate the unrestricted jurisdiction policy files, local_policy.jar and US_export_policy.jar.

To use encryption keys that are greater than 128-bits, use the unrestricted jurisdiction policy files, local_policy.jar and US_export_policy.jar.

The files are located in the (Dist) [WAS_HOME/java/jre/lib/security] (ZOS) [WAS_HOME/java/lib/security directory.

If our back-level version of WebSphere Application Server is using the unrestricted jurisdiction policy files, we must perform special steps to migrate these files to the new version of WAS. If we are not using the unrestricted jurisdiction policy files, we do not need to take any action.

Tasks

1. Before migrating, copy the modified local_policy.jar file to a temporary location.
2. Migrate the WAS installation.

3. Mount the new product HFS as read/write.
4. Copy the modified local_policy.jar file from step 1 to the following directory on the new WAS installation: WAS_HOME/java/jre/lib/security .

5. Copy the modified local_policy.jar file from step 1 to the following directory on the new WAS installation: WAS_HOME/java/lib/security.

6. Mount the new product HFS as read-only.

7. Start the new WAS installation as normal.

Migrate, coexist, and interoperate - Security considerations