A browser with JavaScript enabled is required for this page to operate properly.
Trail: Security Features in Java SE
Lesson: Signing Code and Granting It Permissions
Section: Steps for the Code Receiver
Subsection: Set Up a Policy File to Grant the Required Permission
Signing Code and Granting It Permissions
Steps for the Code Signer
Download and Try the Sample Application
Create a JAR File Containing the Class File
Generate Keys
Sign the JAR File
Export the Public Key Certificate
Steps for the Code Receiver
Observe the Restricted Application
Import the Certificate as a Trusted Certificate
Set Up a Policy File to Grant the Required Permission
Start Policy Tool
Specify the Keystore
Add a Policy Entry with a SignedBy Alias
Save the Policy File
See the Policy File Effects
Home Page > Security Features in Java SE > Signing Code and Granting It Permissions
« Previous • Trail • Next »

Specify the Keystore

For this lesson you will grant all code in JAR files signed by the alias susan read access to all files in the C:\TestData\ directory. You need to
  1. Specify the keystore containing the certificate information aliased by susan

  2. Create the policy entry granting the permission

The keystore is the one named exampleraystore created in the Import the Certificate as a Trusted Certificate step.

To specify the keystore, choose the Change Keystore command in the Edit menu of the main Policy Tool window. This brings up a dialog box in which you can specify the keystore URL and the keystore type.

To specify the keystore named exampleraystore in the Test directory on the C: drive, type the following file URL into the text box labeled New KeyStore URL 

file:/C:/Test/exampleraystore
You can leave the text box labeled New KeyStore Type blank if the keystore type is the default one, as specified in the security properties file. Your keystore will be the default type, so leave the text box blank.
Note: The New KeyStore URL value is a URL and thus should always use slashes (never backslashes) as the directory separator.

When you are done specifying the keystore URL, choose OK. The text box labeled Keystore is now filled in with the URL.

Next, you need to specify the new policy entry.

« Previous • Trail • Next »

Problems with the examples? Try Compiling and Running the Examples: FAQs.
Complaints? Compliments? Suggestions? Give us your feedback.

Previous page: Start Policy Tool
Next page: Add a Policy Entry with a SignedBy Alias