Java within Performance Management is being flagged for using an old release, can it be removed?

Products

• DX NetOps
• CA Performance Management - Usage and Administration

Issue/Introduction

Our security team wants us to remove Java from Performance Management systems.  When running java -version, it shows an old release of Java, can we remove it?

$ java -version
java version "1.7.0_261"
OpenJDK Runtime Environment (rhel-2.6.22.1.el6_10-x86_64 u261-b02)
OpenJDK 64-Bit Server VM (build 24.261-b02, mixed mode)

Environment

All DX NetOps Performance Management releases

Cause

It is most likely that this is the OS Java and not the Performance Management product Java as by default the Java embedded within the product is located at /opt/CA/jre/bin/java and is not in the OS PATH statement but the call being used is using the Java contained within the PATH statement.  To validate for sure you can do the following:

[root@hostname~]# which java
/usr/bin/java
[root@hostname ~]# ls -al /usr/bin/java
lrwxrwxrwx. 1 root root 22 May 22  2019 /usr/bin/java -> /etc/alternatives/java
[root@hostname ~]# ls -al /etc/alternatives/java
lrwxrwxrwx. 1 root root 73 May 22  2019 /etc/alternatives/java -> /usr/lib/jvm/jre-1.7.0-openjdk.x86_64/bin/java

Resolution

So long as you have no other products installed on the same server like Mediation Manager that may make use of the OS Java, you are few to do whatever you wish with it, whether that be to upgrade, downgrade, or even remove it.