Loading

How to Recover Missing FIPS VM Arguments When Running a Mule Application in Anypoint Studio (Gov)

게시 일자: Jun 4, 2026
상세 설명
Applies To

  • Anypoint Studio (Gov)
  • Mule Runtime 4.x (FIPS mode)
  • Operating Systems: Windows (64-bit), macOS ARM (Apple Silicon), macOS x64 (Intel), Linux (64-bit)
  • Security Model: FIPS 140-2
Symptoms

The Mule application fails to start in Anypoint Studio (Gov) with one or more of the following errors:
  • java.security.KeyStoreException: BCFKS not found
  • javax.net.ssl.SSLException: Truststore type BCFKS not recognized
  • java.lang.SecurityException: FIPS mode: only approved mechanisms allowed
  • Application was previously working but stopped after a Run Configuration change
  • Application fails in one project but works in another
 
Root Cause

Anypoint Studio (Gov) automatically generates and injects the required FIPS VM Arguments based on the host operating system when a Mule project is created or imported. These arguments include:

  • BCFKS truststore path (-Djavax.net.ssl.trustStore)
  • Truststore type (-Djavax.net.ssl.trustStoreType=BCFKS)
  • Keystore type (-Dmule.keystore.type=BCFKS)
  • FIPS security model (-Dmule.security.model=fips140-2)
  • Java FIPS security properties (-Djava.security.properties)
  • BouncyCastle FIPS approved-only mode (-Dorg.bouncycastle.fips.approved_only=true)


If these arguments are accidentally removed or manually modified, the application will fail to start in FIPS mode. Since the truststore paths are OS-specific, they cannot be manually reconstructed without referencing a valid Studio (Gov) installation on the same machine.
전제 조건
Anypoint Studio Gov, Mule application, FIPS mode, Windows environment, app odm-pmf-exp-api, Mule runtime 4.9.17, AnypointStudio plugin org.mule.tooling.server.4.9.ee_7.21.0.202605061602, BCFKS keystore file mykeystore.bcfks
과업
How can I recover missing FIPS VM Arguments when running a Mule application in Anypoint Studio (Gov)?
단계
1. Create a new dummy Mule project in Anypoint Studio Gov. 2. Open the run configuration for the dummy project by right-clicking the project and selecting Run As, then Mule Application Configure. 3. Go to the Arguments tab and copy all values listed under VM Arguments. 4. Open the run configuration for the affected application and paste the copied VM Arguments into its VM Arguments section. 5. Re-run the affected application after updating the VM Arguments.
솔루션
Use a dummy Mule project to extract the correct system-generated VM Arguments and apply them to the affected project.

Steps:
  1. Open Anypoint Studio (Gov)
  2. Create a new dummy Mule project (File → New → Mule Project)
  3. Right-click the dummy project → Run As → Mule Application (Configure)
  4. Navigate to the (x) Arguments tab
  5. Copy all values listed under VM Arguments
  6. Open the Run Configuration for your affected application:
    Right-click app → Run As → Mule Application (Configure) → (x) Arguments
  7. Paste the copied VM Arguments into the VM Arguments field
  8. Click Apply, then Run
Example VM Arguments by Operating System

PLEASE NOTE: These are examples only. Paths are system-specific — always use the dummy project method above to generate the correct arguments for your machine. Plugin version numbers (e.g., 1.4.1) may vary depending on your Studio (Gov) version.
macOS ARM (Apple Silicon)
-Dorg.bouncycastle.fips.approved_only=true -Dmule.security.model=fips140-2 -Djavax.net.ssl.trustStore=/Applications/AnypointStudio-Gov.app/Contents/Eclipse/plugins/org.mule.tooling.jdk.macosx.aarch64_1.4.1/Contents/Home/conf/security/cacerts.bcfks -Djavax.net.ssl.trustStoreType=BCFKS -Dmule.keystore.type=BCFKS -Djava.security.properties==/Applications/AnypointStudio-Gov.app/Contents/Eclipse/plugins/org.mule.tooling.jdk.macosx.aarch64_1.4.1/Contents/Home/conf/security/java.fips.security --add-opens=java.base/sun.security.provider=org.bouncycastle.fips.core -M-XX:-UseBiasedLocking -M-Dfile.encoding=UTF-8 -M-XX:+UseG1GC -M-XX:+UseStringDeduplication -M-Dmule.deployment.forceParseConfigXmls=true
macOS x64 (Intel)
-Dorg.bouncycastle.fips.approved_only=true -Dmule.security.model=fips140-2 -Djavax.net.ssl.trustStore=/Applications/AnypointStudio-Gov.app/Contents/Eclipse/plugins/org.mule.tooling.jdk.macosx.x86_64_1.4.1/Contents/Home/conf/security/cacerts.bcfks -Djavax.net.ssl.trustStoreType=BCFKS -Dmule.keystore.type=BCFKS -Djava.security.properties==/Applications/AnypointStudio-Gov.app/Contents/Eclipse/plugins/org.mule.tooling.jdk.macosx.x86_64_1.4.1/Contents/Home/conf/security/java.fips.security --add-opens=java.base/sun.security.provider=org.bouncycastle.fips.core -M-XX:-UseBiasedLocking -M-Dfile.encoding=UTF-8 -M-XX:+UseG1GC -M-XX:+UseStringDeduplication -M-Dmule.deployment.forceParseConfigXmls=true
Windows (64-bit)
-Dorg.bouncycastle.fips.approved_only=true -Dmule.security.model=fips140-2 -Djavax.net.ssl.trustStore=C:\AnypointStudio-Gov\plugins\org.mule.tooling.jdk.win32.x86_64_1.4.1\jdk\conf\security\cacerts.bcfks -Djavax.net.ssl.trustStoreType=BCFKS -Dmule.keystore.type=BCFKS -Djava.security.properties==C:\AnypointStudio-Gov\plugins\org.mule.tooling.jdk.win32.x86_64_1.4.1\jdk\conf\security\java.fips.security --add-opens=java.base/sun.security.provider=org.bouncycastle.fips.core -M-XX:-UseBiasedLocking -M-Dfile.encoding=UTF-8 -M-XX:+UseG1GC -M-XX:+UseStringDeduplication -M-Dmule.deployment.forceParseConfigXmls=true
Linux (64-bit)
-Dorg.bouncycastle.fips.approved_only=true -Dmule.security.model=fips140-2 -Djavax.net.ssl.trustStore=/opt/AnypointStudio-Gov/plugins/org.mule.tooling.jdk.linux.x86_64_1.4.1/jdk/conf/security/cacerts.bcfks -Djavax.net.ssl.trustStoreType=BCFKS -Dmule.keystore.type=BCFKS -Djava.security.properties==/opt/AnypointStudio-Gov/plugins/org.mule.tooling.jdk.linux.x86_64_1.4.1/jdk/conf/security/java.fips.security --add-opens=java.base/sun.security.provider=org.bouncycastle.fips.core -M-XX:-UseBiasedLocking -M-Dfile.encoding=UTF-8 -M-XX:+UseG1GC -M-XX:+UseStringDeduplication -M-Dmule.deployment.forceParseConfigXmls=true
추가 자원
  • Anypoint Studio (Gov) automatically injects the correct FIPS VM Arguments when a project is created or imported — this is expected behavior
  • If the arguments are missing, it is most likely due to accidental removal or manual modification of the Run Configuration
  • Do not manually copy VM Arguments from one OS to another — paths are OS-specific and will not resolve correctly
  • If Anypoint Studio (Gov) was reinstalled or updated, the plugin path may have changed — repeat the steps above to regenerate the correct arguments for the new installation
  • The Windows and Linux path examples above assume default installation directories — your actual paths may differ
Knowledge 기사 번호

005386264

 
로드 중
Salesforce Help | Article