Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
back

ProtectApp to CADP

ProtectApp JCE to CADP for Java

search
printsuggest an edit

ProtectApp JCE to CADP for Java

copy link to clipboardPrerequisites

  • KeySecure Classic is up and running at a supported version. Refer to the KeySecure Classic documentation for details.

  • A supported version of ProtectApp (PA) JCE is configured.

  • CipherTrust Manager is up and running at a supported version. Refer to CipherTrust Manager Deployment for details.

  • Minimum supported Java versions required by CADP for Java should be installed.

  • If SSL is used, the installed Java should have TLS1.2 enabled. Refer to the "Overview, Installation and Configuration" section of the CipherTrust Application Data Protection JCE User Guide for details.

copy link to clipboardSupported Versions

copy link to clipboardCurrent Setup

ProductVersion
ProtectApp JCE8.6.1 or higher
KeySecure Classic8.6.0 or higher

copy link to clipboardTarget Setup

ProductVersion
CADP for Java8.12.2 or higher
CipherTrust Manager2.2 or higher

copy link to clipboardLimitations

  1. Currently, FIPS_Mode is not supported in CADP for Java.

  2. For IBM Java, the 8.12.1, 8.12.2, and 8.12.3 releases of JCE are compatible only with the following versions with some limitations.

    JCE ReleaseSupported IBM Java Version
    8.12.1 and 8.12.2Java 7 (minimum 7.0.10.75 and 7.1.4.75) and Java 8 (minimum 8.0.6.25).
    Note: The 8.12.1 and 8.12.2 releases are validated with version 8.0.6.25.
    8.12.3Java 8 (minimum 8.0.6.25).

    • The KMIPSecretDataSample, CerCreationAndSignSample, and FileEncryptionSampleUsingSEED samples do not work with IBM Java (fixed in CADP JCE Patch 8.12.3p01).

    • The SelfSignedUtility, Passphrase utility and Credentials Obfuscation utilities do not work with IBM Java (fixed in CADP JCE Patch 8.12.3p01).

copy link to clipboardMigration Steps

  1. Upgrade KeySecure Classic to the minimum version of the CipherTrust Manager supported by CADP for Java (view Supported Versions for details).
    Refer to Migrating KeySecure Classic Data to a CipherTrust Manager Appliance for details.

  2. Configure the NAE_IP.1 parameter with the CipherTrust Manager's IP in the IngrianNAE.properties file in your application.

  3. Verify your ProtectApp JCE client with CipherTrust Manager.

  4. Install the latest version of CADP for Java. For installation instructions, refer to the "Installing CipherTrust Application Data Protection JCE" chapter of the CipherTrust Application Data Protection JCE User Guide.

On this page