Configuring the PowerChute Network Shutdown Java Runtime Environment for DRGB-compliant Random Number Generation.
Issue:
How to configure the Java Runtime Environment (JRE) to use DRGB-compliant Random Number Generation with PowerChute Network Shutdown.
Product:
PowerChute Network Shutdown (PCNS) v5.2 and higher
Environment:
All supported operating systems
Solution:
Security guidelines and standards such as NIST SP9800-90A and FIPS-140-2 support the generation of high-quality random bits for cryptographic use and support the use of a Deterministic Random Bit Generator (DRGB)-compliant random number generator.
Security conscious PCNS users may want to configure the JRE used by PowerChute to use a DRGB-compliant Random Number Generator. To do this:
- Open the Java security properties file:
Windows location: C:\Program Files\APC\PowerChute\jre_x64\conf\security
Linux location: /opt/APC/PowerChute/jre_x64/conf/security
- Navigate to the property securerandom.drbg.config
- Edit the property to specify a DRGB algorithm and support suitable for your environment. Further guidance on suitable options is included in the comments of the properties file, and also in the Java Cryptography Architecture Reference Guide > The SecureRandom Class
- Restart the PCNS service. See FA290624 for more information.
Released for: Schneider Electric Canada
