How to upgrade JDK in Access Gateway (SPS) and Policy Server

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

JDK needs to be upgraded from lower versions to higher supported versions for Access Gateway (SPS) and Policy Server due to security vulnerabilities.

 

Resolution

Policy Server JDK upgrade, follow the below steps:

1. 1. Stop the Policy Server;
   2. Change the SYSTEM environment variable NETE_JRE_ROOT to the new path where the new JDK version is installed, by replacing the old location;
   3. Change the SYSTEM environment variable NETE_JAVA_PATH to the new path where the new JDK version is installed, by replacing the old location;
   4. Start the Policy Server; (better to reboot the machine to load all system varible fresh)

Access Gateway (SPS) JDK upgrade, follow the below steps:

1. Stop the CA Access Gateway (SPS);
2. Modify environment variables:
   

   On Windows:
   
   Modify NETE_SPS_JAVA_HOME=<location of new JDK path>, by replacing the old location in the file SmSpsProxyEngine.properties;
   
   On Linux:
   
   Modify SPS_JAVA_HOME=<location of new JDK path>, by replacing the old location in the file ca_sps_env.sh;

3. Start the CA Access Gateway (SPS);