Java has discovered application components that could indicate a security concern

[ddemay]

Hi all,



I am probably going to open up a support call about this, but wanted to
share this screenshot with the community to see if anyone else has
encountered the warning message in newer versions of java and if they had a
workaround?



I am thinking I need to create a certificate for my server(s) and sign the
applet jar files using that certificate. Java security improved in newer
versions and seems to whine about certain applets in systems ranging from
Windchill 6.2.6 up to and including PDMLink 9.1 M050.



Because we have old version of Windchill foundation in production, we have a
Java 1.3_20 JRE, Java 1.4.2_16 JRE, and Java 1.6._26 JRE.



Please see attached for actual picture, text in image reads:



"Java has discovered application components that could indicate a security
concern."



"Name: wt/clients/checker/CheckerApplet"



"Block potentially unsafe components from being run? (recommended)

"More Information."



Under the Yes/No buttons (to which I hit "No" to not block (a delay in
hitting "No" causes problems also) :



"The application contains both signed and unsigned code. Contact the
application vendor to ensure that it has not been tampered with."





Any ideas? I have a few to try, thought I'd see if someone else already
knew so I could save time. anyone from PTC know if there is an internal SPR
or something not publicly disclosed for this?



Some Google searches do turn up some info:

[jessh]

I'm not in PTC technical support and don't know how to look up patch
numbers, etc.

That said, there have long been generic temp patches for this and
related issues for all recent versions of Windchill. Some of these are
necessary for Java 6 Update 19 and higher and additional one(s) for
Update 22 and higher. All of this is in terms of client JVM versions,
not server versions. I can't speak to Java 1.3, 1.4, or 1.5 versions --
as in my book they're all irrelevant ancient history in terms at this
point -- but I believe some of the latest 1.5 versions at least probably
require the same temp patches as the temp patches are necessitated by
breaking changes in the JVM that were done by Sun/Oracle to improve
security.

If you're on a recent Windchill version and stay on the latest available
MOR, you should generally be okay in such areas -- unless there's a long
gap between MORs on PTC's part. If you're on a recent Windchill
version, then there should be a temp patch.

For older Windchill versions, support must (and does) eventually end for
such versions.

--
Jess Holle

[MikeLockwood]

We're seeing the same thing - no solution so far. Adds about 1,324,354,734 to a normal work day.

[YoonKim]

The issue was reported quite a while ago, and the following link addresses it.

[ddemay]

Thanks everyone for the replies, will give temp patches a try.

Sent from my Verizon Wireless BlackBerry