If you are using IBM JDK, the default configurations in the product has to be changed as follows:
Owasp.CsrfGuard.Carbon.properties file (stored in the
<MB_HOME>/repository/conf/security directory) and change the
org.owasp.csrfguard.PRNG.Provider property to
IBMJCE as shown below.
broker.xml file (stored in the
<MB_HOME>/repository/conf directory) and set the
<certType> property to
IbmX509 as shown below.