[RESOLVED] Why do I see an "Allow access to the following application from this web site" warning, or the Wizard doesn't even load, after updating Java? - Progress Community

Loading

Skip to Main Content

[RESOLVED] Why do I see an "Allow access to the following application from this web site" warning, or the Wizard doesn't even load, after updating Java?

Why do I see an "Allow access to the following application from this web site" warning, or the Wizard doesn't even load, after updating Java?

Apr 16, 2020
Knowledge

Title

[RESOLVED] Why do I see an "Allow access to the following application from this web site" warning, or the Wizard doesn't even load, after updating Java?

URL Name

Why-do-I-see-an-Allow-access-to-the-following-application-from-this-web-site-warning-after-updating-Java

Article Number

000185648

Environment

12.3

Question/Problem Description

Why do I see an "Allow access to the following application from this web site" warning, or the Wizard doesn't even load, after updating Java?

Steps to Reproduce

Clarifying Information

Error Message

Defect Number

Enhancement Number

Cause

Resolution

In Oracle's Java 7u45 (1.7.0.45) update, a new security countermeasure was added, such that this message will suddenly appear each time the MOVEit Transfer (DMZ) site is reloaded. To resolve this, users must upgrade to Java 7u51 (1.7.0.51), and MOVEit Transfer (DMZ) system administrators must patch the MOVEit Java Wizard on the server(s). However, it is recommended that the DMZ system administrator patch MOVEit Java Wizard prior to users updating to 7u51.

In Oracle's Java 7u51 (1.7.0.51) update, yet another new security countermeasure was added, such that the MOVEit Java Wizard will not even load. To resolve this, MOVEit DMZ system administrators must patch the MOVEit Java Wizard on the server(s).

The patch is the same for either symptom of the problem. At the time of this writing, one patched version of the MOVEit Java Wizard is available. It is compatible and supported with all MOVEit Transfer (DMZ) versions under active support as of January 14, 2014: versions 7.5.x and higher.

MOVEit Java Wizard Patch Instructions:

For system administrators only:

It is highly recommended that instead of following the below directions, upgrade your installation to the latest available patch for your version. It contains this fix as well as other very important fixes.

1. First, sign on to your Community Portal account and download the MOVEitWizard.jar file from Community Portal

2. Replace the existing MOVEitDMZ\wwwroot\Java\MOVEitWizard.jar file, on all MOVEit Transfer (DMZ) application nodes, with the patched version you downloaded. You may want to copy or rename the existing one for safekeeping.

3. This will take effect immediately on the server-side, but users may still have the old version cached.

Users can follow these steps to re-download the Wizard, after the patch has been installed on the server:

1. Sign in to the MOVEit Transfer (DMZ) web interface

2. Go to the 'My Account' link in the top-right corner of the window

3. Select 'Change Upload/Download Wizard Status (Java Version)'

4. Select 'Disable the Wizard'

5. Select 'Install the Upload/Download Wizard (Java)'

Technical Discussion:

For details on these changes, please see the New Features and Changes section of Oracle's release notes:

For 7u45: http://www.oracle.com/technetwork/java/javase/7u45-relnotes-2016950.html#newft
For 7u51: http://www.oracle.com/technetwork/java/javase/7u51-relnotes-2085002.html#newft

The security change to Java in 7u45 required that Ipswitch recompile the Wizard jar file with a new flag in order for this warning to not appear. However, due to an issue in 7u45, Ipswitch could not do this without removing another flag, which Oracle also required for our applet as of 7u21. This issue is resolved as of Java 7u51, such that all the required flags can coexist properly. This means that even with the new MOVEit Java Wizard patch, the above warning will still occur on Java 7u45.

However, due to yet another new security requirement in Java 7u51, the Wizard will not load without a patch. The security slider in the Java control panel, Security tab, may be adjusted to its lowest setting in order to work-around this issue, but this is not recommended. Furthermore, users will still experience the pop-up pictured at the beginning of this article. Please upgrade and patch your servers as needed.

The resolution here supersedes the resolution for this article.

Workaround

Notes

Keyword Phrase

Last Modified Date

5/12/2021 9:38 AM

Drop Files

Upload FilesOr drop files

Disclaimer

The origins of the information on this site may be internal or external to Progress Software Corporation (“Progress”). Progress Software Corporation makes all reasonable efforts to verify this information. However, the information provided is for your information only. Progress Software Corporation makes no explicit or implied claims to the validity of this information.

Any sample code provided on this site is not supported under any Progress support program or service. The sample code is provided on an "AS IS" basis. Progress makes no warranties, express or implied, and disclaims all implied warranties including, without limitation, the implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample code is borne by the user. In no event shall Progress, its employees, or anyone else involved in the creation, production, or delivery of the code be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample code, even if Progress has been advised of the possibility of such damages.

Loading

[RESOLVED] Why do I see an "Allow access to the following application from this web site" warning, or the Wizard doesn't even load, after updating Java? - Progress Community