How to configure Java Liveupdate to authenticate and download contents via Forefront TMG
Issue/Introduction:
This article provides information on how to configure Java Liveupdate to authenticate and download contents via Forefront TMG
Cause:
Java Liveupdate only supports "Basic" authentication method defined in Forefront TMG.
Resolution:
In order to configure Java Liveupdate to authenticate and download contents via Forefront TMG, "Basic" Authentication method must be enabled at the proxy level.
1) Enable "Basic Authentication" in Forefront TMG
Below is a screenshot taken from the Forefront TMG Management Console showing the location where to enable Basic Authentication:
2) Edit the Java Liveupdate configuration file using Config Editor
Pre-requisistes:
a) Ensure that the latest Java Runtime Environment is installed on the same computer running Java LiveUpdate
b) Ensure that the "java" command path is added to the default PATH environment variable.
c) Ensure that the latest JCE policy files are installed on the system (more info: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html)
From a command prompt, browse to the Java Liveupdate "jar" folder, by default located in the following folders:
(x86) "C:\Program Files (x86)\Common Files\Symantec Shared\Java Liveupdate"
(x64) "C:\Program Files\Common Files\Symantec Shared\Java Liveupdate"
Then run the following command (case sensitive!): java -cp jlu.jar ConfigEditor
In the Config Editor window, enter the following information related to the Forefront TMG configuration:
Name: proxy
Value: <proxy_address>:<port>
Name: proxyusername
Value: <username>
Name: proxypassword
Value: <password>
Then select the "Encrypt" checkbox and click "Save".
IMPORTANT! Scan Engine 5.2.x or Protection Engine users:
Once the file is saved, it must be manually copied (and replaced) to the Scan Engine binaries folder. By default it's located in C:\Program Files\Symantec\Scan Engine.
For more information, please refer to the articles listed in the Related Articles section of this page.
Example of Java Liveupdate log file when downloading content via a TMG proxy server:
Aug 27, 2013 7:12:13 AM Java LiveUpdate launched with the command line = -c C:\Program Files (x86)\Symantec\Scan Engine\liveupdate.conf [ -p SPE URLListLookup Definitions for x86-windows -v 7.0 -l SymAllLanguages -t caiclist -z 0 ] Aug 27, 2013 7:12:13 AM SPE URLListLookup Definitions for x86-windows, 7.0, SymAllLanguages, caiclist, 0 Aug 27, 2013 7:12:13 AM Using character set UTF-8 Aug 27, 2013 7:12:13 AM Command-line Product Selections to update: Aug 27, 2013 7:12:13 AM (ProdName, Version, Lang, ItemSeqName, SeqNum) Aug 27, 2013 7:12:13 AM JLU Windows, 3.9.1, English, LiveUpdateSeq, 28 Aug 27, 2013 7:12:14 AM Java Version 1.7.0_09. Aug 27, 2013 7:12:14 AM Windows Server 2008 R2 6.1 Aug 27, 2013 7:12:14 AM Java LiveUpdate version 3.9.1 Build 28. Aug 27, 2013 7:12:14 AM ProductInventory: parsed default inventory file: C:\ProgramData\Symantec\Java LiveUpdate\Product.Catalog.JavaLiveUpdate Aug 27, 2013 7:12:14 AM Inventory File Product Selections to update: Aug 27, 2013 7:12:14 AM (ProdName, Version, Lang, ItemSeqName, SeqNum) Aug 27, 2013 7:12:14 AM The property maxZipFileSize in config file is 614,400 Aug 27, 2013 7:12:14 AM The property maxTriFileSize is not set in config file Aug 27, 2013 7:12:14 AM The property maxTriFileSize in config file changed to 10,485,760 Aug 27, 2013 7:12:14 AM The property maxPackageSize in config file is 734,003,200 Aug 27, 2013 7:12:14 AM The property maxPackageContentSize in config file is 2,147,483,647 Aug 27, 2013 7:12:14 AM Cache is disabled. Aug 27, 2013 7:12:14 AM Checking to see if JLU can connect to its own listener thread. Aug 27, 2013 7:12:14 AM Checking to see if a session of JLU is running at port 50032. Aug 27, 2013 7:12:14 AM An active JLU session has been detected. Aug 27, 2013 7:12:14 AM JLU was able to successfully connect to its own listener thread. Aug 27, 2013 7:12:14 AM Downloading minitri.flg to C:\Users\Administrator\Desktop\JLU\1377601934242\minitri.flg ... Aug 27, 2013 7:12:14 AM Attempting to first connect to the host without using proxy authentication. Aug 27, 2013 7:12:14 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:12:14 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:12:14 AM Waiting for response ... Aug 27, 2013 7:12:44 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:12:44 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:12:44 AM Waiting for response ... Aug 27, 2013 7:12:44 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:12:44 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:12:44 AM Waiting for response ... Aug 27, 2013 7:12:44 AM Receiving file ... Aug 27, 2013 7:12:44 AM Transfer completed in 344 ms (1,101 bytes/sec) Aug 27, 2013 7:12:44 AM Downloading spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip to C:\Users\Administrator\Desktop\JLU\1377601934242\spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip ... Aug 27, 2013 7:12:44 AM Attempting to first connect to the host without using proxy authentication. Aug 27, 2013 7:12:44 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:12:44 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:12:44 AM Waiting for response ... Aug 27, 2013 7:13:14 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:13:14 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:13:14 AM Waiting for response ... Aug 27, 2013 7:13:14 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:13:14 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:13:14 AM Waiting for response ... Aug 27, 2013 7:13:15 AM Receiving file ... Aug 27, 2013 7:13:15 AM Transfer completed in 281 ms (12,217 bytes/sec) Aug 27, 2013 7:13:15 AM Downloading jlu$20windows_3.9.1_english_livetri.zip to C:\Users\Administrator\Desktop\JLU\1377601934242\jlu$20windows_3.9.1_english_livetri.zip ... Aug 27, 2013 7:13:15 AM Attempting to first connect to the host without using proxy authentication. Aug 27, 2013 7:13:15 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:13:15 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:13:15 AM Waiting for response ... Aug 27, 2013 7:13:45 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:13:45 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:13:45 AM Waiting for response ... Aug 27, 2013 7:13:45 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:13:45 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:13:45 AM Waiting for response ... Aug 27, 2013 7:13:45 AM The zip entry is liveupdt.tri Aug 27, 2013 7:13:45 AM The zip entry is liveupdt.grd Aug 27, 2013 7:13:45 AM The zip entry is liveupdt.sig Aug 27, 2013 7:13:45 AM Unzipping spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip into C:\Users\Administrator\Desktop\JLU\1377601934242\spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip1377602025518 ... Aug 27, 2013 7:13:45 AM The zip file downloaded is a catalog file Aug 27, 2013 7:13:45 AM Extracting liveupdt.tri Aug 27, 2013 7:13:45 AM Total number of bytes read is 1,334 Aug 27, 2013 7:13:45 AM Extracting liveupdt.grd Aug 27, 2013 7:13:45 AM Total number of bytes read is 483 Aug 27, 2013 7:13:45 AM Extracting liveupdt.sig Aug 27, 2013 7:13:45 AM Total number of bytes read is 2,609 Aug 27, 2013 7:13:45 AM Unzipping completed Aug 27, 2013 7:13:45 AM Loading root certificate Aug 27, 2013 7:13:45 AM Setting certificate restrictions Aug 27, 2013 7:13:45 AM Loading guard file: C:\Users\Administrator\Desktop\JLU\1377601934242\spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip1377602025518\liveupdt.grd Aug 27, 2013 7:13:45 AM Precondtion evaluation succeeded for expression . Aug 27, 2013 7:13:45 AM For input string: "". UIPriv value is not valid. Aug 27, 2013 7:13:45 AM Downloading 1377544368jtun_caiclist1.x86 to C:\Users\Administrator\Desktop\JLU\1377601934242\1377544368jtun_caiclist1.x86 ... Aug 27, 2013 7:13:45 AM Attempting to first connect to the host without using proxy authentication. Aug 27, 2013 7:13:45 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:13:45 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:13:45 AM Waiting for response ... Aug 27, 2013 7:14:15 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:14:15 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:14:15 AM Waiting for response ... Aug 27, 2013 7:14:15 AM Connecting to HTTP proxy 192.168.11.100:8080 ... Aug 27, 2013 7:14:15 AM Connected to 192.168.11.100:8080 sending request ... Aug 27, 2013 7:14:15 AM Waiting for response ... Aug 27, 2013 7:14:15 AM Receiving file ... Aug 27, 2013 7:14:15 AM Transfer completed in 218 ms (85,711 bytes/sec) Aug 27, 2013 7:14:15 AM Checking authenticity of package C:\Users\Administrator\Desktop\JLU\1377601934242\1377544368jtun_caiclist1.x86 Aug 27, 2013 7:14:15 AM The zip entry is caiclist Aug 27, 2013 7:14:15 AM The zip entry is cfcurlclist Aug 27, 2013 7:14:15 AM The zip entry is urldefupdtr.ini Aug 27, 2013 7:14:15 AM The zip entry is urldefupdtr.jar Aug 27, 2013 7:14:15 AM Unzipping 1377544368jtun_caiclist1.x86 into C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985 ... Aug 27, 2013 7:14:15 AM Extracting caiclist Aug 27, 2013 7:14:15 AM Total number of bytes read is 53,333 Aug 27, 2013 7:14:15 AM Extracting cfcurlclist Aug 27, 2013 7:14:15 AM Total number of bytes read is 158 Aug 27, 2013 7:14:15 AM Extracting urldefupdtr.ini Aug 27, 2013 7:14:15 AM Total number of bytes read is 292 Aug 27, 2013 7:14:15 AM Extracting urldefupdtr.jar Aug 27, 2013 7:14:16 AM Total number of bytes read is 3,686 Aug 27, 2013 7:14:16 AM Unzipping completed Aug 27, 2013 7:14:16 AM Adding C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985\urldefupdtr.jar to the class path. Aug 27, 2013 7:14:16 AM Loaded urldefupdater.URLDefInstaller from C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985\urldefupdtr.jar Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Update Description: Copying files.... Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Source directory: C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985 Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Destination directory: C:\Program Files (x86)\Symantec\Scan Engine\definitions\URLListLookup\tmpIncomingcaic Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: JLU version: 2.1.7 Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: pkgDir: C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985 Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Update Description: Deleting temp files... Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Delete file: urldefupdtr.jar Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Delete file: urldefupdtr.ini Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Create file: C:\Program Files (x86)\Symantec\Scan Engine\definitions\URLListLookup\tmpIncomingcaic\defdownloaddir.ini Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Update Description: done Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Number of files copied: 4 Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Number of files temporary deleted: 2 Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Number of files copied net: 2 Aug 27, 2013 7:14:16 AM Aug 27, 2013 7:14:16 AM The Java LiveUpdate session has completed successfully. Aug 27, 2013 7:14:16 AM Return code = 0 Aug 27, 2013 7:14:16 AM