How can the embedded Java version be upgraded independently in the CommandCentral Storage Unix product from Veritas?

[Rod_p1]

Problem

Java is embedded within the CommandCentral Storage (CCS) application and requires manual steps to upgrade to work with the application.

Error

There are many vulnerability scans that can alert to vulnerabilities in a Java / JRE version and a patch would be required to upgrade the CCS application to the latest available Java version from Oracle.

Environment

Solaris 9 / 10 the CCS Management Server.

Java / JRE from Oracle
 
CCS 5.2 RU1, RU2, RU3, RU4

Cause

Java / JRE is embedded within the CCS application and the installer for Java updater updates a standalone installation

Solution

Supported OS:
This version of the JRE is supported on the Oracle Solaris 10 Update 9 or later OS.

Download the latest jre and cryptographic jars from Oracle Jre download site:
http://www.oracle.com/technetwork/java/javase/downloads/index.html

Download JRE :
------------
   -  jre-7u<version>-solaris-sparc.tar.gz     
   -  jre-7u<version>-solaris-sparcv9.tar.gz   

As of the date of writing the version was update 9.
http://www.oracle.com/technetwork/java/javase/downloads/jdk7u9-downloads-1859576.html

Oracle has documentation available on a per release instance for example:
http://docs.oracle.com/javase/7/docs/webnotes/install/solaris/solaris-jre.html

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7 : 
--------------------------------------------------------------------------------
UnlimitedJCEPolicyJDK7.zip 

Installation:
------------

1] The following steps can be performed in either order.
    a) gzip -dc jre-7u<version>-solaris-sparc.tar.gz | tar xf -
    b) gzip -dc jre-7u<version>-solaris-sparcv9.tar.gz | tar xf -

2] Rename the extracted directory "jre1.7.<version>"  to "jre"
	mv jre1.7.<version> jre

3] Update the cryptographic jars
    a) Unzip UnlimitedJCEPolicyJDK7.zip 
       This contains two jars: 
	- local_policy.jar
	- US_export_policy.jar

    b) Copy the above two jars from UnlimitedJCEPolicy/ to jre/lib/security/

4] Backup the current jre folder
        /Install_location/VRTSccs/VRTSccstw/esmweb/jre

Default location -- /opt/VRTSccs/VRTSccstw/esmweb/jre

5] Copy the new jre to /Install_location/VRTSccs/VRTSccstw/esmweb

6] Stop the CCS webserver
	
     (i) cd to /opt/VRTSccs/VRTSccsts/bin/vxccs
     (ii) and execute ./vxccs stop esmweb 

7] start the CCS webserver
	./vxccs start esmweb