Install and configure Java to be used exclusively by Symantec Endpoint Protection (SEP) for Linux

book

Article ID: 179996

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

 

Resolution

NOTE: The method outlined below is not the only method available for installing Java for SEP. This information is simply provided as an example. The only requirement is that the Oracle Java & JCE be installed on the machine. 

This article will guide you in downloading and installing a version of Oracle (Sun) Java that will only be used by Symantec Endpoint Protection for Linux. This will enable Symantec Endpoint Protection (SEP) for Linux to use its own version of Java that can be installed alongside other versions of Java, without causing a negative impact on a computer. These steps must be completed prior to installing Symantec Endpoint Protection for Linux.

  1. Go to the Java download page.
     
  2. Download one of the following files, depending if you are on a 32-bit or 64-bit (x64) system:
    • x86 - jre-8u60-linux-i586.tar.gz
    • x64 - jre-8u60-linux-x64.tar.gz
       
  3. Visit the JCE download page and download the jce_policy-8.zip.
     
  4. Open a terminal window and change to the directory where Java was downloaded (usually /home/USERNAME/Downloads).
     
  5. Extract the .tar.gz:
    tar zxvf jre-8u60-linux-*.tar.gz
     
  6. This should result in a new directory that now contains Java (similar to jre1.8.0_60).
     
  7. Now, extract the JCE policy files:
    unzip jce_policy-8.zip
     
  8. Change directory to the UnlimitedJCEPolicy directory:
    cd UnlimitedJCEPolicy
     
  9. Copy the JCE policy files into the jre1.8.0_60/lib/security directory located in the Java directory extracted in the previous steps:
    cp jce*.jar ../jre1.8.0_60/lib/security/
     
  10. Move the JRE directory containing Java into the /opt/Symantec directory (you may need to have root privileges to do this):
    mv jre1.8.0_60 /opt/Symantec
     
  11. Create a new file Symantec.conf file under /etc using the below template, so that JAVA_HOME points to the correct Java directory. Note that the Java binary is located in the bin subdirectory of the previously extracted Java directory
    [Symantec Shared]
    BaseDir=/opt/Symantec
    JAVA_HOME=/opt/Symantec/jre1.8.0_60/bin
     
     
  12. Run the install.sh script to install Symantec Endpoint Protection for Linux.

Symantec Endpoint Protection for Linux is now configured to use the Java version installed at /opt/Symantec/jre1.8.0_60. No other software on the system will use this version of Java. If LiveUpdate was previously run before setting up this separate Java instance, you may need to re-install Java LiveUpdate or create a new /etc/liveupdate.conf file.

Note: Java SE 8 is recommended for use with Symantec Endpoint Protection for Linux.