Reset Search



KB40580 - Premier Java RDP (HOB) Applet fails to launch after upgrading to Java 8 Update 131

« Go Back


Last Modified Date4/24/2017 4:17 PM
This article describes an issue where Premier Java RDP (HOB) applet fails to launch after upgrading the Oracle Java JRE client to Java 8 update 131 (or higher) if running PCS 8.1R11 (or lower version)
Problem or Goal
After upgrading to Java 8 Update 131, Premier Java RDP (HOB) Applet fails to launch  with the following message:
preloader: Delivering: ErrorEvent[url=https://XXXXX label=attempted to open sandboxed jar 
https://XXXXX/jwtwebJ2.jar as a Trusted-Library cause=attempted to open sandboxed jar 
https://XXXXX/jwtwebJ2.jar as a Trusted-Library
This issue is applicable only to PCS 8.1R11 (and lower versions) If you are running PCS version 8.2R1 (or higher) you are not impacted by this issue
The issue occurs due to the Java Applets being signed using MD5 signature algorithm on older versions (8.1R11 or lower) of PCS software. And Java 8 update 131 introduces a new restriction on how MD5 signed JAR files are verified as mentioned in their release notes
If you are an end-user and not the administrator of the PCS gateway device, please forward this article to the PCS administrator or IT team.

To resolve this issue, upgrade the PCS gateway to 8.1R11.1, 8.1R12 or higher version of 8.1Rx PCS software if you wish to remain on 8.1Rx software branch. Alternatively, you may upgrade to the latest 8.2Rx software version to resolve this issue

Note: Prior to upgrading to 8.1R11.1 and above, please review the following known issue at KB40559 - JSAM and other Java applets fails to launch through the Pulse Connect Secure (PCS) device when using Encryption Strength 168-bit and greater after upgrading to 8.1R11.1 and above and 8.3R1


We strongly recommend to upgrade the PCS software version to fix this issue. However, if that is not possible, please use one of the below workarounds until the PCS software upgrade is completed. 
  • Downgrade Oracle Java JRE client version below update 131
  • Upload a Microsoft Authenticode certificate to the PCS gateway device and select the option to resign all PCS Applets
Related Links
Attachment 1 
Created ByK. Kitajima



Was this article helpful?



Please tell us how we can make this article more useful.

Characters Remaining: 255