How can the embedded Java version be upgraded independently in the CommandCentral Storage Windows product from Veritas?

[Rod_p1]

Problem

Java is embedded within the Commandcentral Storage (CCS) application and requires manual steps to upgrade to work with the application.

Error

There are many vulnerability scans that can alert to vulnerabilities in a Java / JRE version and a patch would be required to upgrade the CCS application to the latest avaialble Java version from Oracle.

Environment

Windows 2003 / 2008 hosting the CCS Management Server.

Windows Server 2008 32 bit and 64 bit, Windows Server 2003 32 bit and 64 bit

Java / JRE from Oracle

 
CCS 5.2 RU1, RU2, RU3, RU4

Cause

Java / JRE is embedded within the CCS application and the installer for Java updater updates a standalone installation

Solution

Supported OS:
------------
Windows Server 2008 32 bit and 64 bit, Windows Server 2003 32 bit and 64 bit

Download the latest jre and cryptographic jars from Oracle Jre download site:
http://www.oracle.com/technetwork/java/javase/downloads/index.html


Download JRE :
-------------
    jre-7u<version>-windows-i586.tar.gz

As of the date of writing the version was update 9.
http://www.oracle.com/technetwork/java/javase/downloads/jdk7u9-downloads-1859576.html

Oracle has documentation available on a per release instance for example:
http://docs.oracle.com/javase/7/docs/webnotes/install/windows/jre-installation-windows.html

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7 : 
---------------------------------------------------------------------------------
    UnlimitedJCEPolicyJDK7.zip 

Installation:
------------
1] Unpack the tarball
     jre-7u<version>-windows-i586.tar.gz

2] Rename the extracted directory "jre1.7.<version>"  to "jre"
	
3] Update the cryptographic jars
    a) Unzip UnlimitedJCEPolicyJDK7.zip 
       This contains two jars: 
	- local_policy.jar
	- US_export_policy.jar

    b) Copy the above two jars from UnlimitedJCEPolicy/ to jre/lib/security/

4] Stop CCS webserver
	Stop service "Veritas CommandCentral Web Console"

5] Backup the current jre folder
        <CCS_INSTALL_LOCATION>/CommandCentral Storage/Web Engine/esmweb/jre

6] Copy the new jre to <CCS_INSTALL_LOCATION>/CommandCentral Storage/Web Engine/esmweb

7] Star the webserver
	Start service "Veritas CommandCentral Web Console"