Can I upgrade the JRE that ships with Data Protection

Document ID : KB000070611
Last Modified Date : 16/03/2018
Show Technical Document Details
Introduction:

CA Data Protection utilizes an embedded version of the Java Runtime Environment (JRE) release 1.80_51. This is installed as part of the program installation and exclusively for use by CA Data Protection. 

Question:

From time to time Oracle announces updates to the Java JRE (1.8) to address vulnerabilities or add enhancements. Can the embedded JRE that is included with CA Data Protection be upgraded?

Environment:
This question is relevant to all release of CA Data Protection in general but it should be noted that the aforementioned references to the Java JRE (1.80_51) are specific to Data protection 15.2 other builds may include other versions of the JRE
Answer:

The JRE which is embedded with Data Protection should not be shared with other applications and it should not be upgraded.  CA will only support the specific major-minor version of the JRE (1.8).  Upgrading the JRE may cause the application to stop working correctly or stop working entirely.

If there are any vulnerabilities which require patching which requires an update to the minor version for example patching from 1.8_51 to 1.8_151 this should be done with extreme caution.  CA Does not test every patch release and only provides specific guidance when a vulnerability has been identified as impacting Data protection.

CA Data Protection packages the Java Run-time (JRE) and is deployed during installation. This JRE is packaged from the Java Development Kit (JDK) installation.

The path to this JRE can be found in registry at

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ComputerAssociates\CA DataMinder\CurrentVersion\JREPath.

In case of native 64-bit CMS, registry is
HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\CA DataMinder\CurrentVersion\JREPath.
 
To use a patched JRE.
1. Install the JRE which gets installed/shipped with JDK.
2. Stop "CA Data Protection" services.
3. Point the registry mentioned above to the install location of the JRE.

Example:

If JDK is installed at C:\Program Files (x86)\Java\jdk1.8.0_151, then JREPath will generally be C:\Program Files (x86)\Java\jdk1.8.0_151\jre

4. Start "CA Data Protection" services.
 
Each server has its own JRE and having different versions will not cause problems.
 
Important Note:
Installers tend to reconfigure JREPath to the default value during repair or installation of patches . Please make sure, to reset the path to the required destination JRE folder.

 

Additional Information:

Orchestria, CA DLP and DataMinder are previous brand names for the product now known as CA Data Protection.

http://www.ca.com/us/support/ca-support-online/product-content/status/support-life-cycle/indexes/ca-data-protection-release-and-support-lifecycle-dates.aspx