Error message "java.security.InvalidKeyException: Illegal key size" in RSA Data Loss Prevention Enterprise Manager
4 years ago
Originally Published: 2015-10-02
Article Number
000059421
Applies To
RSA Product Set: Data Loss Prevention
RSA Product/Service Type: Enterprise Manager
Platform: Windows Server 2008R2/2012
Issue
  • The Enterprise Coordinator can't communicate with the Enterprise Manager.
  • The Root Endpoint Coordinator can't communicate with the Enterprise Manager. 
  • The following errors are seen:
29 Sep 2015 16:16:06,593 | ERROR - HttpChannel.sendViaClient(144) | javax.net.ssl.SSLException: java.security.InvalidKeyException: Illegal key size
29 Sep 2015 16:16:06,593 | ERROR - PrivateConnectorClientServiceImpl.logTransmissionError(232) | FunctionalFlow - alert config Unable to transmit alert config to web service endpoint rsadlpec.xxxxxxx.xxxxx.com. Reason is Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.
29 Sep 2015 16:16:06,593 | ERROR - LoggingAsynchronousExceptionListener.onEvent(39) | Asynchronous exception occurred processing event continuation: Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.
29 Sep 2015 16:16:06,593 | ERROR - EMApplicationEventMulticaster$1.run(180) | Unexpected exception occurred during event processing: Could not invoke service.. Nested exception is org.codehaus.xfire.fault.XFireFault: Couldn't send message.; job is recoverable and will be retried
Cause
The error is caused when out-of-date local_policy.jar and US_export_policy.jar files are installed.
Resolution
To resolve this issue, replace the local_policy.jar and US_export_policy.jar with the unlimited java JCE files located in C:\Program Files\Java\jre1.7.0_25\lib\security, using the steps below:
  1. Download the updated local_policy.jar and US_export_policy.jar files from Oracle Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7 Download page.
  2. Move the two files of that name that are in C:\Program Files\Java\jre1.7.0_25\lib\security to a backup folder.
  3. Replace the files with the unlimited local_policy.jar and the US_export_policy.jar files downloaded from the Oracle website.
  4. Restart the EM service.