Single Sign-On for Java Websphere Edition upgrade to 3.3
Recent releases of Single Sign-On for Java Standard Edition 3.3 include all the functionality of VSJ WebSphere Edition 3.2 and can be used to upgrade Single Sign-On for Java WebSphere Edition.
To upgrade an existing installation of VSJ WebSphere Edition 3.2: 1. Obtain the current release of VSJ Standard Edition from support.quest.com. Currently this is VSJ Standard Edition 3.3 Patch 3596. It is packaged as a zip file; expand it. The 'lib' directory of the unzipped distribution contains a JAR file, vsj-standard-3.3.jar 2. Shut down WebSphere Application Server 3. In your existing WebSphere installation that uses VSJ WebSphere Edition 3.2, find the "vsj-websphere-3.2.jar" file (typically in WAS_HOME/lib) and remove it. Also remove the "jldap.jar" file (this is now included in vsj-standard-3.3.jar). 4. Copy the new vsj-standard-3.3.jar file in place of vsj-websphere-3.2.jar and jldap.jar. 5. Restart WebSphere Application Server The new version is upwards-compatible from VSJ WebSphere Edition 3.2, so your existing configuration will continue to work as-is. In addition, new functionality from VSJ 3.3 is now available; in particular, the new code supports the Kerberos AES encryption types from Windows Server 2008 and above. If you wish to use the AES functionality: 1. The VSJ service account in Active Directory must be configured to enable the AES encryption types, and 2. If you are using a keytab (with VSJ's "idm.keytab" parameter), you may need to create a new keytab that includes AES entries