On a secure cluster having no internet access, you must deploy the Java Cryptography Extension (JCE) security policy .jar files on the Ambari Server, before setting up your Ambari server with a custom JDK.
When you enable security, Ambari distributes the JCE .jars to all appropriate hosts in your cluster.
To obtain and deploy the JCE .jar files appropriate for the JDK version in your cluster on your Ambari-server host,
Download the archive from one of the following locations
For JDK 1.6: http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html
For JDK 1.7: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
Save the archive in a temporary location.
Copy the archive to
/var/lib/ambari-server/resources
on the Ambari server.