Products | Versions |
---|---|
TIBCO ActiveMatrix BusinessWorks | 5.14.0 , 5.13.1 , 5.13.0 |
TIBCO Runtime Agent (TRA) 5.11.1 and 5.10.2 release introduce BouncyCastle as new security provider and remove Entrust. After installing the above mentioned TRA service pack, j2se and bcfips would be two available security providers in BusinessWorks.
Refer to the below table for available security provider(s) based on BusinessWorks / TRA versions:
BW / TRA Release |
Available Security Providers |
Default Security Provider |
BW 5.14 / TRA 5.11.1 |
j2se , bcfips |
j2se |
BW 5.14 / TRA 5.11.0 |
j2se , entrust |
entrust |
BW 5.13.x / TRA 5.10.2 |
j2se , bcfips |
j2se |
BW 5.13.x / TRA 5.10.1 |
j2se , entrust |
entrust |
We recommend to set the security provider as j2se in most of the cases unless you need FIPS compliance which is available with BouncyCastle (bcfips) security provider.
You can check your deployed BW application .tra to see which security provider is in use:
1. Security Provider is j2se
If your BW application is using j2se as a security provider (deployed application .tra file has : java.property.TIBCO_SECURITY_VENDOR=j2se) then no change is required in the application.
2. Security Provider is entrust
If your BW application is using entrust as security provider (deployed application .tra file has : java.property.TIBCO_SECURITY_VENDOR=entrust61) then you need to change the security provider to j2se or bcfips by modifying the java.property.TIBCO_SECURITY_VENDOR property as follows :
java.property.TIBCO_SECURITY_VENDOR=j2se
Or
java.property.TIBCO_SECURITY_VENDOR=bcfips
3. No Security Provider specified
If your BW application does not have “java.property.TIBCO_SECURITY_VENDOR” then you need to add the following property to deployed application .tra to set the appropriate security provider (j2se or bcfips):
java.property.TIBCO_SECURITY_VENDOR=j2se
Or
java.property.TIBCO_SECURITY_VENDOR=bcfips
Note: The “java.property.TIBCO_SECURITY_VENDOR” property can be set to desired security vendor in bwengine.tra so that any new BW application deployment or redeployment of existing application will have this property included in the application .tra file.