Using Web Start Workstation with Java 7 u51 (Java7u51, Java 1.7.0_51-b13)

Products

• CA Application Performance Management Agent (APM / Wily / Introscope)
• INTROSCOPE

Issue/Introduction

Description:

A Technical Advisory has been issued to address problems starting the APM Web Start Workstation. The Advisory allows users to run the Web Start workstation with Java 7 u45, but does not work with Java 7 u51. This article updates the Advisory to allow users to run the Web Start workstation with the enhanced security present in Java 7 u51 and above by taking the additional step of reducing the Security Level from High to Medium.

Solution:

Java 7u51x64 is installed on the user's Workstation PC.
APM Web Start Workstation 9.5.1.0

Check the local Java version on the workstation PC with the command

java -version

<Please see attached file for image>

Open an IE browser on the user's Workstation PC.

Enter the address of the EM Web Start in the browser:

http://xxx:8081/workstation

The Web Start workstation fails to launch.

<Please see attached file for image>

<Please see attached file for image>

<jnlp codebase="http://xxx.ca.com:8081/">
 <information>
  <title>CA Introscope Workstation 9.5.1.0</title>
  <vendor>CA Technologies</vendor>
  <description>Introscope Workstation</description>
  <icon href="/images/ca_technologies_logo.png"/>
  <icon kind="splash" href="/images/ca_technologies_logo.png"/>
</information>
<security>
<all-permissions/>
</security>
<resources>
  <jar href="workstationProduct/plugins/org.eclipse.equinox.launcher_1.0.101.R34x_v20080819.jar"/>
  <extension name="Introscope Workstation" href="jnlp/com.wily.introscope.workstation.feature.jsp"/>
  <extension name="Eclipse Plugins" href="jnlp/eclipseplugins.jsp"/>
  <property name="osgi.instance.area" value="@user.home/Application Data/Wily/Introscope/product/workstation"/>
  <property name="osgi.configuration.area" value="@user.home/Application Data/Wily/Introscope/product/workstation"/>
<property name="eclipse.product" value="com.wily.introscope.workstation.productWebstart"/>
<j2se version="1.6*&1.6.0_05+" java-vm-args="-Xms64m -Xmx512m -Dsun.java2d.noddraw=true" href="http://java.sun.com/products/autodl/j2se"/>
<property name="sun.java2d.noddraw" value="true"/>
</resources>
<application-desc main-class="org.eclipse.equinox.launcher.WebStartMain">
  <argument>-noexit</argument>
  <argument>-clean</argument>
  <argument>-loginhost</argument>
  <argument>xxx.ca.com</argument>
  <argument>-loginport</argument>
  <argument>5001</argument>
  <argument>-autofill</argument>
  <argument>true</argument>
  <argument>-timezone</argument>
  <argument>timezone</argument>
  <argument>-conmeth</argument>
  <argument>all</argument>
 </application-desc>
</jnlp> 

<Please see attached file for image>

java.lang.SecurityException: Missing required Permissions manifest attribute in main jar: http://xxx.ca.com:8081/workstationProduct/plugins/org.eclipse.equinox.launcher_1.0.101.R34x_v20080819.jar

    at com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unknown Source)       
    at com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unknown Source) 
    at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
    at com.sun.javaws.Launcher.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)

Web Start fails to start with SecurityException.

Implement Technical Advisory Workaround Option 1 for Java 7u45 by making updates on EM-MOM.

Option 1. Update the file <EM_HOME>/product/enterprisemanager/plugins/com.wily.introscope.workstation.webstart_X .X.X/WebContent/jnlp/workstation.jsp with the following items. This workaround requires that the Security Level setting for Java in the Java Control Panel is set to a maximum of "High".

• Remove the following JNLP properties in the <resources> section
  

  <property     
  name="osgi.instance.area" 
  value="@user.home/Application Data/Wily/Introscope/product/workstation"/>
  <property 
   name="osgi.configuration.area" 
   value="@user.home/Application Data/Wily/Introscope/product/workstation"/>
  <property 
   name="eclipse.product" 
   value="com.wily.introscope.workstation.productWebstart"/> 

  
  
• Add the following arguments to the <application-desc main-class="org.eclipse.equinox.launcher.WebStartMain"> section
  

  <argument>-product</argument>
  <argument>com.wily.introscope.workstation.productWebstart</argument>
  <argument>-data</argument>
  <argument>@user.home/Application Data/Wily/Introscope/product/workstation</argument>
  <argument>-dev</argument>
  <argument>@user.home/Application Data/Wily/Introscope/product/workstation</argument> 

  
  

Web Start still fails to launch.

<Please see attached file for image>

<Please see attached file for image>

<jnlp codebase="http://xxx.ca.com:8081/">
<information>
 <title>CA Introscope Workstation 9.5.1.0</title>
  <vendor>CA Technologies</vendor>
  <description>Introscope Workstation</description>
  <icon href="/images/ca_technologies_logo.png"/>
  <icon kind="splash" href="/images/ca_technologies_logo.png"/>
 </information>
<security>
<all-permissions/>
</security>
<resources>
<jar href="workstationProduct/plugins/org.eclipse.equinox.launcher_1.0.101.R34x_v20080819.jar"/>
<extension name="Introscope Workstation" href="jnlp/com.wily.introscope.workstation.feature.jsp"/>
<extension name="Eclipse Plugins" href="jnlp/eclipseplugins.jsp"/>
<j2se version="1.6*&1.6.0_05+" java-vm-args="-Xms64m -Xmx512m -Dsun.java2d.noddraw=true" href="http://java.sun.com/products/autodl/j2se"/>
<property name="sun.java2d.noddraw" value="true"/>
</resources>
<application-desc main-class="org.eclipse.equinox.launcher.WebStartMain">
  <argument>-noexit</argument>
  <argument>-clean</argument> 
  <argument>-loginhost</argument>
  <argument>xxx.ca.com</argument>
  <argument>-loginport</argument>
  <argument>5001</argument>
  <argument>-autofill</argument>
  <argument>true</argument>
  <argument>-timezone</argument>
  <argument>timezone</argument>
  <argument>-product</argument>
  <argument>com.wily.introscope.workstation.productWebstart</argument>
  <argument>-data</argument>
  <argument>@user.home/Application Data/Wily/Introscope/product/workstation</argument>
  <argument>-dev</argument>
  <argument>@user.home/Application Data/Wily/Introscope/product/workstation</argument>
  <argument>-conmeth</argument>
  <argument>all</argument>
</application-desc>
</jnlp> 

java.lang.SecurityException: Missing required Permissions manifest attribute in main jar: http://xxx.ca.com:8081/workstationProduct/plugins/org.eclipse.equinox.launcher_1.0.101.R34x_v20080819.jar

     at com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unknown Source)       
     at com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unknown Source) 
     at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
     at com.sun.javaws.Launcher.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)

Implement extra steps for Java 7 u51

Execute javacpl.exe for Java 7 on workstation box to invoke the Java Control Panel.

<Please see attached file for image>

Delete temporary files and applications

<Please see attached file for image>

Reduce security to Medium

<Please see attached file for image>

<Please see attached file for image>

Close browser

Open Browser and go to http://xxx:8081/workstation

Check "I accept the risk and want to run this application"

Click Run

<Please see attached file for image>

The application begins to download.

<Please see attached file for image>

Repeat for the 2^nd warning box:

<Please see attached file for image>

Click "Don't Block" when prompted to "Block potentially unsafe components from being run?"

<Please see attached file for image>

Workstation Login appears. Enter host, port, and credentials.

Click "Connect"

<Please see attached file for image>

The Web Start workstation opens.

<Please see attached file for image>

<Please see attached file for image>

Environment

Release:
Component: APMISP