After upgrading JRE to Java 7U51, the Infoview Web Intelligence (WEBI) Java Client gives an Application Error: SecurityException: Missing required permissions manifest attribute in main jar: http://CABI:8080/AnalyticalReporting/webiApplet/ThinCadenza.jar

Products

• CA IT Asset Manager
• CA Software Asset Manager (CA SAM)
• ASSET PORTFOLIO MGMT- SERVER
• SUPPORT AUTOMATION- SERVER
• CA Service Desk Manager - Unified Self Service
• CA Service Desk Manager
• CA Service Management - Asset Portfolio Management
• CA Service Management - Service Desk Manager

Issue/Introduction

Description:

Introduction

Java 7 update 51 includes two security changes designed to enhance authentication and authorization for Rich Internet Applications (Applets and Web Start).

This update mandates all RIAs that run inside a web browser need to be signed from a trusted authority and also need to set "Permissions" attribute within the manifest. As a result, all the WEBI reports throw a security warning in the form of dialog box.

Applicability

• We are not dealing with the Java version of CABI server in all platforms
  
  
• This problem will occur at client machine from which end user is accessing Infoview with Java 7u51 or above installed
  
  
• This is not applicable for other CABI releases like CABI 3.2, 3.3 etc. because these releases do not support Java7 on the client side officially

Steps to reproduce

• Login into Infoview
  
  
• Go to Document List
  
  
• Select any folder
  
  
• Click New menu and then select Web Intelligence Document
  
  
• Select any universe from which you want to create WEBI report
  
  
• Below warning message will appear (only for the first time)
  
  

  <Please see attached file for image>

  

If you click on Run or Cancel button, the below message will appear. For the first time it will directly display the below message without displaying the above warning message.

<Please see attached file for image>

Click on Error. Click for details link to see the error

<Please see attached file for image>

Click Details to see the error details

<Please see attached file for image>

Solution:

On the CABI server follow the below steps

• Login to CABI server machine as administrator
  
  
• Download the CABI_3.3_SP1_LAFix6.0.19_Windows.zip file from https://ftp.broadcom.com/user/downloads/CAproducts/CABI/CABI-3.x/LAFixes and extract it to a folder
  
  
• Stop the Tomcat7 server via the Central Configuration Manager (CCM)
  
  
• Go to <INSTALL_DIR>\Tomcat7\webapps\AnalyticalReporting\webiApplet (e.g. C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat7\webapps\AnalyticalReporting\webiApplet)
  
  
• Backup the following files
  
  
  • ThinCadenza.jar
    
    
  • ThinCadenza.jar.pack.gz
    
    
  • One or more ThinCadenza_XX.jar, where XX represents the language code (i.e. ThinCadenza_en.jar for English)
    
    
• Replace the same set of files from the extracted folder along with RCThinCadenza.jar
  
  
• Go to <INSTALL_DIR>\Tomcat7\work (e.g. C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat7\work) and remove the Catalina folder
  
  
• Restart the Tomcat7 server via the CCM

At the client (end user) machine follow the below steps

• Clear the JRE cache by following the below procedure
  
  
  • Go to Control Panel and open Java control panel
    
    

    <Please see attached file for image>

    
    
    
  • In General tab click Settings button under Temporary Internet Files section
    
    

    <Please see attached file for image>

    
    
    
  • Click Delete Files... button, it will display the below message box
    
    

    <Please see attached file for image>

    
    
    
  • Click OK button 3 times in 3 windows to complete the JRE cache cleanup
    
    
• Clear the IE browser cache
  
  
• Delete Temporary Internet Files for IE browser
  
  
• Close the IE browser

Note: If there is a need to run the WDEPLOY command on the CABI server in future, the steps performed on the CABI server will need to be redone.

Environment

Release: UAPMAC990JPP-12.9-Asset Portfolio Management-Asset Configuration
Component: