If you still have this problem with a Windows server, try this:
find the Java Cryptography Extension (JCE) files from this process: https://jamfnation.jamfsoftware.com/article.html?id=28
Before copying those files into your jre directory, right click the files click on "Unblock". Then copy them over to the jre directory.
On RHEL using OpenJDK, only the cipher for Java 1.6/JDS use works, which breaks iOS Self Service.
To fix this, we had to install Oracle Java along with the JCE policies on our JSS v9.96 install.
Get list of available Java installs
sudo yum list available java*
Install latest Oracle Java
sudo yum install java-1.8.0-oracle.x86_64
Configure alternatives to use latest Java and select the version of Java you want to switch to.
sudo update-alternatives --config java
Then you have to download the JCE policy and SCP it to your server: JCE Policies
scp jce_policy-8.zip username@jssserver.FQDN:/tmp/
Unzip and replace the existing *.jar files into /usr/lib/jvm/java-1.8.0-oracle/jre/lib/security/
sudo unzip jce_policy-8.zip
sudo cp *.jar /usr/lib/jvm/java-1.8.0-oracle/jre/lib/security/
Restart Tomcat and Self Service should be working now.