Impact of Security Provider changes on TIBCO BusinessWorks 5.14.0 and 5.13.x

Impact of Security Provider changes on TIBCO BusinessWorks 5.14.0 and 5.13.x

book

Article ID: KB0075692

calendar_today

Updated On:

Products Versions
TIBCO ActiveMatrix BusinessWorks 5.14.0 , 5.13.1 , 5.13.0

Description

TIBCO Runtime Agent (TRA)  5.11.1 and 5.10.2 release introduce BouncyCastle as new security provider and remove Entrust. After installing the above mentioned TRA service pack, j2se and bcfips would be two available security providers in BusinessWorks.

Refer to the below table for available security provider(s) based on BusinessWorks / TRA versions:

BW / TRA Release

Available Security Providers 

Default Security Provider

BW 5.14 / TRA 5.11.1

j2se , bcfips 

j2se

BW 5.14 / TRA 5.11.0

j2se , entrust  

entrust

BW 5.13.x / TRA 5.10.2

j2se , bcfips

j2se

BW 5.13.x / TRA 5.10.1

j2se , entrust

entrust

Note: For IBM AIX platforms the security provider is "ibm".

 

Issue/Introduction

Impact of Security Provider changes on TIBCO BusinessWorks 5.14.0 and 5.13.x

Environment

TIBCO TRA 5.11.1 TIBCO TRA 5.10.2

Resolution

We recommend to set the security provider as j2se in most of the cases unless you need FIPS compliance which is available with BouncyCastle (bcfips) security provider.

You can check your deployed BW application .tra  to see which security provider is in use:

1. Security Provider is j2se

If your BW application is using j2se as a security provider (deployed application .tra file has :  java.property.TIBCO_SECURITY_VENDOR=j2se) then no change is required in the application. 

2. Security Provider is entrust

If your BW application is using entrust as security provider (deployed application .tra file has :  java.property.TIBCO_SECURITY_VENDOR=entrust61) then you need to change the security provider to j2se or bcfips by modifying the java.property.TIBCO_SECURITY_VENDOR property as follows :

java.property.TIBCO_SECURITY_VENDOR=j2se

Or 

java.property.TIBCO_SECURITY_VENDOR=bcfips

3. No Security Provider specified  

If your BW application does not have “java.property.TIBCO_SECURITY_VENDOR” then you need to add the following property to deployed application .tra to set the appropriate security provider (j2se or bcfips):

java.property.TIBCO_SECURITY_VENDOR=j2se 

Or

java.property.TIBCO_SECURITY_VENDOR=bcfips

Note:  The “java.property.TIBCO_SECURITY_VENDOR” property can be set to desired security vendor in bwengine.tra so that any new BW application deployment or redeployment of existing application will have this property included in the application .tra file.

Additional Information

1.   Support Policy for TIBCO Runtime Agent™(TRA™) and TIBCO Products dependent on TRA™

      https://support.tibco.com/s/article/Support-Policy-for-TIBCO-Runtime-Agent-and-TRA-dependent-Products

2.   TIBCO Runtime Agent (TRA) release notes (refer sections - New Features and Changes in Functionality):

      TRA 5.11.1  -   https://docs.tibco.com/pub/runtime_agent/5.11.1/TIB_TRA_5.11.1_relnotes.pdf
      TRA 5.10.2  -   https://docs.tibco.com/pub/runtime_agent/5.10.2/TIB_TRA_5.10.2_relnotes.pdf?id=1