On the Ambari Server, obtain the JCE policy file appropriate for the JDK version in your cluster.

Save the policy file archive in a temporary location.

On Ambari Server and on each host in the cluster, add the unlimited security policy JCE jars to $JAVA_HOME/jre/lib/security/.

For example, run the following to extract the policy jars into the JDK installed on your host:

unzip -o -j -q jce_policy-8.zip -d /usr/jdk64/jdk1.8.0_60/jre/lib/security/

Restart Ambari Server.