Summary:
This Knowledge Base article describes java issue with JCE in mobile certificate server. This issue is not a Strategy related error and can also be connected with SC instead of BC.
Symptom:
After setup of MSTR Mobile certificate server and configuring the client certificate configuration user is encountering Java.lang error when invoking certificate using Strategy app certificate server:
<error msg="exception encrypting data - java.lang.SecurityException: JCE cannot authenticate the provider BC" code="-3"/>
Cause:
All JCE (Java Cryptography Extension) provider JARs must be signed before they will be trusted by your Java runtime. BC (BouncyCastle class) dutifully supplies signed JARs that will work without a problem. However, if you extract class files from this JAR, or recompile the source, it will remove the signature and cause Java to reject the code. There can be also the same issue with SC (SpongyCastle class).
Action:
There is no viable workaround or steps to reproduce as this is not connected with Strategy performance. This issue requires direct changes in java files:
1. edit jre\lib\security\java.security
add security.provider.10=org.bouncycastle.jce.provider.BouncyCastleProvider
2. copy bc*.jar to jre\lib\ext
KB439280
