Java

Java – Your security settings have blocked an application

Java security settings blocked application

Java security settings blocked application is an common issue.

Many times, we need to run an application that has a java component and we see this message:

Error : Your security settings have blocked an application signed with an expired or not-yet-valid certificate for running.

In my case I’m trying to open Oracle Essbase Administration Services 11.1.2 and when I click “launch” I see this.

Java security settings blocked application

Why?

Java has further enhanced security to make the user system less vulnerable to external exploits. Starting with Java 7 Update 51, Java does not allow users to run applications that are not signed (unsigned), self-signed (not signed by trusted authority) or that are missing permission attributes.

Risks involved in running applications

Unsigned application

An application without a certificate (i.e. unsigned apps), or missing application Name and Publisher information are blocked by default. Running this kind of application is potentially unsafe and present higher level of risk.

Self-signed application (Certificate not from trusted authority)

An application with self-signed certificate is blocked by default. Applications of this type present the highest level of risk because publisher is not identified and the application may be granted access to personal data on your computer.

Jar file missing Permission Attribute

Permissions Attribute verifies that the application requests the permission level that developer specified. If this attribute is not present, it might be possible for an attacker to exploit a user by re-deploying an application that is signed with original certificate and running the application at a different privilege level.

 

So… the solution that I found is:

Go to Control Panel and then click Programs

 

Search “Java” and start the program

You can see this, click on security tab and then click “Edit Site List…”

Now you can put your url in the exception list, remember put the url with the port, for example http://server:9000

After added the url you will see this screen, click continue

Next time that you open Oracle Essbase Administration Services you will see this, just check “I Accept” and the “Run”.

Leave a Reply

Your email address will not be published. Required fields are marked *