8.7 Configuring Unlimited Strength Jurisdiction Policy Files

By default, JDK is restricted to use the Advanced Encryption Standard (AES) 128-bit key encryption and not the higher strength keys. This restriction is because of policies in some countries for permitted key strength of imported encryption software.

If your country permits, you can remove the restriction by overriding the security policy files with others that Oracle provides.

To configure the unlimited strength jurisdiction policy files, perform the following steps:

  1. Download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files from Oracle.

    Ensure that you download the correct policy file updates for your version of Java.

  2. Extract the downloaded file.

    The download includes two .jar files with the same names as the existing policy files.

  3. Locate the following two existing policy files:

    • local_policy.jar

    • US_export_policy.jar

      Linux: <java-home>/lib/security/

      Windows: C:/Program Files/Java/jre<version>/lib/security/

  4. Replace the existing policy files with the unlimited strength policy files you extracted.