iLO Java Remote Console: Upcoming JRE 1.7u51 (9837 Views)
Reply
Occasional Visitor
Liam_Gretton
Posts: 1
Registered: ‎10-28-2013
Message 1 of 14 (9,837 Views)

iLO Java Remote Console: Upcoming JRE 1.7u51

There's a forthcoming JRE release 1.7u51 in Jan 2014 which will prevent the Java Remote Console from working.

 

Currently 1.7u45 reports the following but allows the application to work:

 

This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permissions attribute.

 

Oracle has posted more information about this on their blog.

 

We're running a mixture of iLO versions, the most recent being iLO 4 1.22.

 

I've tried and failed to navigate HP's dreadful site to see if there's a newer version. Is anyone aware of a more recent version of iLO that will address this problem?

Please use plain text.
Honored Contributor
Oscar A. Perez
Posts: 643
Registered: ‎11-01-2005
Message 2 of 14 (9,774 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

[ Edited ]

We're aware of the problem and we will be adding the "Permissions" and "Codebase" attributes to the JAR file manifest for iLO2, iLO3 and iLO4 Java Remote Console Apps.

 

However, after adding the required attributes, we are still seeing these same warnings. Clicking on the details, we see that Java now complains about iLO not being a trusted website.  To solve this issue, users will have to import into each iLO a trusted SSL certificate signed by their own Certification Authority and then begin logging into iLO using only iLO DNS name instead of the iLO IP address.

 

In addition, users might need to import into the Java Keystore on each client the certificate of the Certification Authority that issued those iLO SSL certiticates or Java will not trust the iLO's new imported certificates.

 

Please use plain text.
Visitor
GrantStreet
Posts: 3
Registered: ‎12-09-2013
Message 3 of 14 (9,024 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

So How do we do this at scale? we have over 1200 blades across 41 chassis's.

We have our own CA and it's root cert is in all our browsers, java etc.

Please use plain text.
Occasional Advisor
iLOdude
Posts: 5
Registered: ‎01-23-2013
Message 4 of 14 (8,959 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

Based on the testing I've done with Java 7u60 beta, the remote console will work if your iLOs don't have a signed SSL cert. Also, Java update 51 will provide an exception site list. See below

https://blogs.oracle.com/java-platform-group/entry/upcoming_exception_site_list_in
Please use plain text.
Honored Contributor
Oscar A. Perez
Posts: 643
Registered: ‎11-01-2005
Message 5 of 14 (8,844 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

Java 7u51 was released today and I can say that even with the fix for the manifest file we did for iLO2 v2.23, iLO3 v1.65 and iLO4 v1.32 and adding a trusted SSL certificate to each iLO, users could still experience issues opening the remote console and the virtual media applets.

 

 

The best solution so far is adding all your iLOs to the Java exception site list.

 

Please use plain text.
Occasional Visitor
mattlok-101
Posts: 1
Registered: ‎01-27-2014
Message 6 of 14 (8,181 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

Hi Everyone,

 

Just to let everyone know that updating iLO 2  to latest firmware 2.23 for BL460c G6 and BL465 G5 did not solve the problem for the Java 7u51.

 

Also adding the acception list to java's security does not work either for 7u51.

 

Tested on Windows 7, Windows 8, Windows 8.1 - IE 10, IE11, Firefox 26.

 

Any help is appreciated since iLO's java remote session will not work on any of the blades. 

Please use plain text.
Honored Contributor
Oscar A. Perez
Posts: 643
Registered: ‎11-01-2005
Message 7 of 14 (8,097 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

Do you have the debug output from the java console?

 

Please use plain text.
Visitor
_visitor_
Posts: 4
Registered: ‎01-30-2014
Message 8 of 14 (8,039 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

Like mattlok-101, upgrading to version 2.23 on my DL 385 G5, didn't fix the issue. 

 

When I try to view the Remote Console with IE 11 on Windows 7,  I receive a message that says - Error: Click for details.   The information from the Java console is listed below.

 

Firefox 24.2.0 ESR gives me even less information.  I've cleared the cache, etc. from both browsers.  I alo tried adding the IP address of the iLO to the Java exception list, but it doesn't fix the issue either. 

 

 

Java Plug-in 1.7.0_51
Using JRE version 1.7.0_51-b13 Java HotSpot(TM) Client VM

load: class com.hp.ilo2.remcons.remcons.class not found.
java.lang.ClassNotFoundException: com.hp.ilo2.remcons.remcons.class
	at sun.applet.AppletClassLoader.findClass(Unknown Source)
	at java.lang.ClassLoader.loadClass(Unknown Source)
	at sun.applet.AppletClassLoader.loadClass(Unknown Source)
	at java.lang.ClassLoader.loadClass(Unknown Source)
	at sun.applet.AppletClassLoader.loadCode(Unknown Source)
	at sun.applet.AppletPanel.createApplet(Unknown Source)
	at sun.plugin.AppletViewer.createApplet(Unknown Source)
	at sun.applet.AppletPanel.runLoader(Unknown Source)
	at sun.applet.AppletPanel.run(Unknown Source)
	at java.lang.Thread.run(Unknown Source)

 

Please use plain text.
Honored Contributor
Oscar A. Perez
Posts: 643
Registered: ‎11-01-2005
Message 9 of 14 (8,028 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

[ Edited ]

Have you tried deleting temporary files in the Java Control Panel?

 

Open Java Control Panel and under General Tab, click on Settings button. It will open the Temporary File Settings window. Click on Delete Files button and select Installed Applicatons and Applets. Click OK.

 

This should force Java to download the new remcons app from iLO next time you click on the Remote Console link.

 

If it still won't work after this, go to the Security tab and try lowering the Security level.  Also click on "Restore Security Prompts".

 

 

 

 

 

 

Please use plain text.
Visitor
_visitor_
Posts: 4
Registered: ‎01-30-2014
Message 10 of 14 (8,004 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

 

I had the "keep temporary files on my computer" unchecked.  I re-enbled it, opened and closed Java time or two and deleted the temporary files, as well as the Installed Applications and Applets.

 

Retried the Remote Console - still doesn't work.

 

Have you tried deleting temporary files in the Java Control Panel?

 

I re-enabled the Next Generation Java Plugin (had it disabled for another app), and lowered the security from High to Medium.  Also clicked on "Restore Security Prompts".

 

Retried the Remote Console - still doesn't work.

 

If it still won't work after this, go to the Security tab and try lowering the Security level.  Also click on "Restore Security Prompts".

 

I still receive a message that says "Error, Click for details". 

 

When I click on it, up pops up an  "Application Error" dialog box titled "RuntimeException" that lists  "java.lang.reflect.InvocationTargetException".    The dialog has a button "Details" but clicking this just opens the Java Console, in which there are no error messages.

 

 

Please use plain text.
Honored Contributor
Oscar A. Perez
Posts: 643
Registered: ‎11-01-2005
Message 11 of 14 (7,997 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

[ Edited ]

I do see the "Error, Click for details" with iLOs that are not in my Java exception site list but, If I close it and try again or click on the "Reload" button, Java will open the remote console.

 

You said you tried adding your iLO to the exception site list.   Did you use   https://iLO-IP-Address   format?

Please use plain text.
Visitor
_visitor_
Posts: 4
Registered: ‎01-30-2014
Message 12 of 14 (7,979 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

Yes I did.

 

You said you tried adding your iLO to the exception site list.   Did you use   https://iLO-IP-Address   format?

 

Clicking the "Reload" button, just takes me back to the same, "Error, Click for details" message.

 

I do see the "Error, Click for details" with iLOs that are not in my Java exception site list but, If I close it and try again or click on the "Reload" button, Java will open the remote console.

 

Taking your "reload" suggestion a little further, I found that if I got the the "Error, Click for details" message, and then closed the window.  And, back at the main iLO window, did a F5 (refresh), and reselected the "Remote Console", I'd get the (expected) server console screen. 

 

And, it worked for me, regardless of whether the IP address was listed as an exception or not.  I was experimenting with 2 servers - one with an exception, the other with one.

 

While it's clumsy, at least I have a working solution now.

 

Thanks for your help.

 

Please use plain text.
Visitor
_visitor_
Posts: 4
Registered: ‎01-30-2014
Message 13 of 14 (7,915 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

I did some additional testing this morning.  I was able to raise the Java Security level back to High.  And, I removed the IP addresses from the exception list.

 

My workaround of having to try to access the Remote Console, close the window, refresh, retry Remote Console still works. 

 

The solution works with either IE 11 or Firefox 24.2.0 ESR.

Please use plain text.
Occasional Contributor
KidCargo
Posts: 3
Registered: ‎03-03-2014
Message 14 of 14 (6,982 Views)

Re: iLO Java Remote Console: Upcoming JRE 1.7u51

I'm running into this on the Lo100s running fw 4.25.  I added the site to the exception site list and still can't get the applet to load.  I get the "Missing required Permissions manifest attribute in main jar:  http://<my ip>/M2.jar"

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation