Symantec Access Management

 View Only

Tech Tip : CA Single Sign-On : CA SSO R12.52 Unable to connect to LunaSafenet Hardware Security Module(hsm) for Token Generation

  • 1.  Tech Tip : CA Single Sign-On : CA SSO R12.52 Unable to connect to LunaSafenet Hardware Security Module(hsm) for Token Generation

    Broadcom Employee
    Posted Nov 09, 2018 06:47 AM

    Question:


    I'd like us to know if Policy Server uses Java as a Service or as a
    Client.

     

    Answer:


    Out of the box, Policy Server has its JVM set to run as a Service, as
    you'll see in the file

     

    {policy_server_home}/config/JVMOptions.txt

    -server
    -Xbootclasspath/p:/opt/CA/siteminder/bin/endorsed/xercesImpl.jar:
    /opt/CA/siteminder/bin/endorsed/xml-apis.jar:
    /opt/CA/siteminder/bin/endorsed/resolver.jar:
    /opt/CA/siteminder/bin/endorsed/serializer.jar
    -Xrs
    -Xms128m
    -Xmx256m

     

    And as stated in the following link, the choice of using java as a
    service is probably motivated by the better performances in production
    environment.

     

    JVM Server vs Client Mode

     

    "So server mode is better suited for production deployments and gives
    better performance."

     

    https://javapapers.com/core-java/jvm-server-vs-client-mode/


    KB : KB000120659