Anyone successfully get rid of that "your java version is insecure" for java 7 update 15?
i've tried property files, i've tried registry hacks, not sure what more i can do. I'm about to just say poo poo, and tell them java sucks and it can't be done and then sue oracle for my pain and suffering. ________________________________ From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Erik Wold Sent: Friday, February 22, 2013 10:57 AM To: <mssms@lists.myitforum.com> Subject: Re: [mssms] Java 7 update 15 and Java 6 Update 41 I made a msi that copies in the two files, have that and the java file in a task seq, works good in our environment. Mvh Erik Den 22. feb. 2013 kl. 14:59 skrev "Linkey, Mike" <mlin...@icc.illinois.gov<mailto:mlin...@icc.illinois.gov>>: I have given up on this for now. I put the files there and it just does not work. Everything is still enabled. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Chris Stauffer Sent: Thursday, February 21, 2013 7:35 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 Sorry i have been off Sick.... Yeah you could deploy it with Java as part of the install or use a TS or GPO Pref. Doesn't matter how you get it there as long as it is there. Thanks, Christopher Stauffer <>< Enterprise SMS Admin Enterprise AD Admin Mail: cstauf...@myitforum.com<mailto:cstauf...@myitforum.com> Blog: http://myitforum.com/myitforumwp/community/members/chrisstauffer/ {Microsoft Certified} -- MCSA: Server Administrator -- MCITP: Server Administrator -- MCTS: SCCM 2007 -- MCP:SMS 2003 {CompTIA Certified} -- CompTIA A+ -- CompTIA Security + ________________________________ From: "Burke, John" <john.bu...@bellaliant.ca<mailto:john.bu...@bellaliant.ca>> Sent: Wednesday, February 20, 2013 12:36 PM To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 so to use the deployment.properties file - you simply have to create the file and throw it on the hard drive in the correct location? it doesn't matter how it gets there right? task sequence for example ? ________________________________ From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Mott Sent: Wednesday, February 20, 2013 12:44 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 I used Andrews suggestions at my last job and it worked great. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of andrew.ber...@everestre.com<mailto:andrew.ber...@everestre.com> Sent: Wednesday, February 20, 2013 11:11 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 There are two components here: the registry key(s) for JU and JAVAUPDATE (which could easily have a DCM applied) and the deployment.configuration/deployment.properties files - the registry key(s) used to take care of whether or not the "Update" tab appears in Java's control panel, but after just checking both JU/JAVAUPDATE properties as 1 and 0, it doesn't appear to matter anymore, at least on JRE 7u15, as I no longer see an "Update" tab at all on either seting. deployment.configuration/deployment.properties files can be used to configure this option: <image001.png> From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Mark Mears Sent: Wednesday, February 20, 2013 10:53 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 Please correct me if I'm wrong but isn't this a case where DCM could check for a registry value (auto update enabled) and reset it to be off? That way no expenditure on labor to rebuild the package and distribute to everybody that already has it. Am I way off here? Thanks, Mark From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of andrew.ber...@everestre.com<mailto:andrew.ber...@everestre.com> Sent: Wednesday, February 20, 2013 10:42 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 InstallShield Tuner of some variety, right? On the left panel, go to "Additional Tools" -> "Direct Editor" -> "Property" ... ? From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Burke, John Sent: Wednesday, February 20, 2013 10:38 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 This is the installshield mst editor. I'm really missing my wise. I'm not a huge fan of this tool. I don't even see a way i can view the table directly with this. ________________________________ From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of andrew.ber...@everestre.com<mailto:andrew.ber...@everestre.com> Sent: Wednesday, February 20, 2013 11:28 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 I assume you're using Tuner? Not sure what the registry view maps to in an MST per se. Go straight to the "Properties" table - if you see JU and JAVAUPDATE = 1, then it is safe to say they're undefined. That said, you'll still need to use the deployment.config and deployment.properties files to get system-wide configuration via an "Oracle approved" method (although I still bother to set the JU and JAVAUPDATE bits on the property table) From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Burke, John Sent: Wednesday, February 20, 2013 10:19 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 Hey - If i edit the mst that was used here and i go to the registry , javasoft, runtime, jdk_version, msi - I see all kinds of properties, and the data look like: Does this mean they created the mst but didn't disable autoupdate? <image002.jpg> ________________________________ From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of andrew.ber...@everestre.com<mailto:andrew.ber...@everestre.com> Sent: Wednesday, February 20, 2013 11:13 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [mssms] Java 7 update 15 and Java 6 Update 41 As an addition to Erik's comment below, please note that JRE 6 and 7 have their configuration handled via the deployment.config and deployment.properties files and not just the registry (although from personal experience some configuration is still available by manipulating the properties table via MST). See below: http://docs.oracle.com/javase/7/docs/technotes/guides/deployment/deployment-guide/properties.html Specifically you want to add the "deployment.javaws.autodownload=NEVER" line to your deployment.properties file. (I do a few others too, like "deployment.security.mixcode=HIDE_RUN"). Also starting with JRE 7 Update 10, there are two new installer properties (WEB_JAVA and WEB_JAVA_SECURITY_LEVEL) as referenced here: https://www.java.com/en/download/help/silent_install.xml Regards, Andrew From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Erik Wold Sent: Wednesday, February 20, 2013 9:54 AM To: <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>> Subject: Re: [mssms] Java 7 update 15 and Java 6 Update 41 Easy to turn off the auto updates in a MST (transforms) file. I usally use this and a reg file to turn off auto updates for those that has installed the updates by them selfes (admins). Mvh Erik Den 20. feb. 2013 kl. 15:47 skrev "Burke, John" <john.bu...@bellaliant.ca<mailto:john.bu...@bellaliant.ca>>: awesome - they just pushed out update 35 here and left hte auto update on :( Is it just me or are these java pushes hard to get the auto update turned off on? ________________________________ From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Chris Stauffer Sent: Wednesday, February 20, 2013 10:34 AM To: Myitforum SMS Subject: [mssms] Java 7 update 15 and Java 6 Update 41 Thank you Oracle for updating once again... can we get everything in one patch. This is crazy 3 update in less then 2 months. Java was updated again last night.Oracle patches five more Java vulnerabilities that weren't fixed in a security update earlier in February.This includes 4 cat 10 updates that are actively being exploited.This update will also AUTO UPDATE version 6 to version 7 update 15. *************************** Even though the new Java 6 Update 41 is available for download from Oracle's website, it is not available from Java.com<http://Java.com> and must be obtained manually. The updating feature in Java 6 installations will prompt users to download and install Java 7 Update 15. *************************** Read more here: http://www.techworld.com.au/article/454292/oracle_releases_new_java_fixes_speeds_up_patching_cycle/ http://www.oracle.com/technetwork/java/javase/documentation/autoupdate-1667051.html http://www.oracle.com/technetwork/java/javase/7u15-relnotes-1907738.html Thanks, Christopher Stauffer <>< Enterprise SMS Admin Enterprise AD Admin Mail: cstauf...@myitforum.com<mailto:cstauf...@myitforum.com> Blog: http://myitforum.com/myitforumwp/community/members/chrisstauffer/ {Microsoft Certified} -- MCSA: Server Administrator -- MCITP: Server Administrator -- MCTS: SCCM 2007 -- MCP:SMS 2003 {CompTIA Certified} -- CompTIA A+ -- CompTIA Security + ________________________________ This e-mail is intended only for the person or entity to whom it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. If you are not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this message is prohibited. If you have received this e-mail in error, please contact the sender immediately and delete the original message and all copies from your system. Statements and representations made in this message are not necessarily that of the Company. ________________________________ This e-mail is intended only for the person or entity to whom it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. If you are not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this message is prohibited. If you have received this e-mail in error, please contact the sender immediately and delete the original message and all copies from your system. Statements and representations made in this message are not necessarily that of the Company. ________________________________ This e-mail is intended only for the person or entity to whom it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. If you are not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this message is prohibited. If you have received this e-mail in error, please contact the sender immediately and delete the original message and all copies from your system. Statements and representations made in this message are not necessarily that of the Company. ________________________________ This e-mail is intended only for the person or entity to whom it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. If you are not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this message is prohibited. If you have received this e-mail in error, please contact the sender immediately and delete the original message and all copies from your system. Statements and representations made in this message are not necessarily that of the Company. ________________________________ DISCLAIMER: This is a PRIVATE AND CONFIDENTIAL message for the ordinary user of this email address. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind 1E to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
