Workstation WebStart Certificate gives Expiration Message.

Document ID : KB000074749
Last Modified Date : 23/05/2018
Show Technical Document Details
Issue:
On March 10, 2018, the CA APM Java JRE certificate expired.

This impacts all customers who use Webstart client. Customers who initiate the workstation through the downloaded JNLP will be blocked if their security is set beyond medium.

Customers using Webstart client for initiating the Workstation, will encounter an Application Blocked Security alert, if their security setting is configured beyond medium. Further clicking on the OK button will quit the process without any action. 
Environment:
Standalone Workstation and WebView are not impacted by this issue. Only the Webstart Workstation is impacted.
Affects versions 9.7.x, 10.1, 10.2, 10.3, 10.5.x and 10.7HF#1
Resolution:
Solution:
You can use any of the below available Hotfixes:

9.7.1  => HF #25  ( includes the fix for this issue only )
10.1   => HF #39  ( includes the fix for this issue only )
10.2   => HF #38  ( includes the fix for this issue only )
10.3   => HF #42  ( includes the fix for this issue only )
10.5   => HF#11   ( includes the fix for this issue only )
10.5.1 => HF#63 or any higher (cumulative hotfix, it includes many fixes including the fix for this certificate issue)
10.5.2 => HF#34 or any higher (cumulative hotfix, it includes many fixes including the fix for this certificate issue)
10.7.1 => HF#3 or any higher (cumulative hotfix, it includes many fixes including the fix for this certificate issue)

You need to contact CA Support to obtain any the above hotfixes packages

Workaround:

Option 1: If the security level is set to high or above, the level should be brought down to medium. Once the security level is set to medium, the Webstart client can be initiated to start the Workstation.

In order to do this -> Go to Control Panel -> Java - > Security and adjust the security level. The medium security level was removed in Java 8 update 20


Option 2: Add the Webstart URL to the exception site list. Once this site is added reinitiating the Webstart client starts the Workstation.

In order to do this - > Go to Control Panel -> Java - > Security -> Click on Edit Site List and add the URL in the location box.