2017 Expiring Java certificates

Document ID : KB000088115
Last Modified Date : 14/04/2018
Show Technical Document Details
Issue:
Error Message :
N/A

In June 2017 Applications Manager's Java Client certificate has expired. If using a release of Java 7 update 51 or later, Java will not allow Applications Manager to launch with an expired certificate. Applications Manager 8.0.17 HF1, 9.0.1 HF, 9.1.3, and 9.2.0 will all contain the updated Java Certificate. Additional information on which versions are affected can be found at our community post here.

Investigation
Expired certificates will run into the error "Application Blocked by Java Security" when launching the Java Web Client.

0EMb0000001UkMt.png




 

 
Environment:
OS Version: N/A
Cause:
Cause type:
By design
Root Cause: Java's client certifications last two years.
Resolution:
Update to a fix version listed below or a newer version if available.

Applications Manager 8.0.17 HF1, 9.0.1 HF, 9.1.3, and 9.2.0 will all contain the updated Java Certificates. 
 
This new certificate will expire in 2019. Applications Manager (AM) v8 will be out of maintenance and support before then on 2018-03-31. There will not be a new Java certificate update after this date for AM v8.


Fix Status: Released

Fix Version(s):
Applications Manager 9.2.0 - Available
Applications Manager 9.1.3 - Available
Applications Manager 9.0.1 HF1 - Available
Applications Manager 8.0.17 HF1 - Available
Additional Information:
Workaround :
Add the Java Web Client's Apache URL to Java's exception site list by opening Java control panel's security tab.

0EMb0000001UkMy.png

Edit Site List, choose Add and enter in the Java Web Client's Apache URL. The Apache URL for the Java Web Client is URL to Launch the Web Client but excluding all characters after the Apache Port. In this example, the client URL is "http://172.16.148.162:80/PHMAM8/Intro.html", so the Apache URL is "http://172.16.148.162:80". Select Continue to accept the risk.

0EMb0000001UkN3.png

Confirm that the URL is listed in the Exception Site List as seen below.

0EMb0000001UkN8.png

Select Apply/OK.