64-bit Java for Windows - SunPKCS11 and Hotspot Client VM?
I work as a software architect for a large government agency in Sweden where we are currently upgrading our client platform from Windows XP to Windows 7 and also looking at upgrading from JRE 6 to JRE 7. Our Windows client platform is using a PKI infrastructure based on smart cards and X509 certificates and our current standalone Java applications use the SunPKCS11 Security Provider to access the smart card keystore and the client certificates used for SSL authentication and SSO against our application platform (SUSE Linux, Apache Web Server and JBoss Enterprise Application Platform).
We are currently performing security-related tests with JDK6 and JDK7 on Windows 7 (both 32-bit and 64-bit) where we have come to the following important conclusions:
- SunPKCS11 is not implemented in any 64-bit version of the Windows JDK (including the latest JDK7 b145)
- SunMSCAPI (the Microsoft Crypto API) is not implemented in JDK6 64-bit but seems to be available in JDK7 64-bit (b145)
- The Hotspot Client VM is not implemented for 64-bit Windows JDK6 or JDK7
We are very interested in finding answers to the following questions:
1. When will SunPKCS11 be implemented for 64-bit Java on Windows? We are currently using the Net iD CSP which has a 64-bit PKCS11 module for Windows that we are unable to use since 64-bit Java has no PKCS11 support.
2. Is SunMSCAPI a viable replacement for SunPKCS11 for all 64-bit Java applications running on Windows?
3. When will the 64-bit Hotspot Client VM be available for Windows and what kind of runtime behaviour can we expect from using the 64-bit Hotspot Server VM with a complex Java Swing application (as opposed to the 32-bit Hotspot Client VM)?
4. Is it safe to assume that the current release date for JDK7 (July 28) will be held?
Thank you very much in advance.