Home > Java, Mac administration > Oracle Java 7 Update 51 blocks unsigned Java applets by default

Oracle Java 7 Update 51 blocks unsigned Java applets by default

Oracle released Java 7 Update 51 on January 14th. As part of the installation, the Java security level is set by default to High. With this security setting, self-signed and unsigned applets are blocked from running. This can be verified by going to http://javatester.org/version.html, as this site uses an unsigned Java applet.

Screen Shot 2014-01-14 at 2.46.33 PM

Screen Shot 2014-01-14 at 2.46.48 PM

Fortunately, it appears that there are a couple of ways to fix this. See below the jump for details.

Adding the site to the Exception Site List

It is possible to whitelist specific sites, which allows the ability to access those specific sites and run Java applets and Java Web Start applications that do not meet the latest security requirements.

To add sites to the Exception Site List on Mac OS X 10.7.x – 10.9.x:

1. Open System Preferences

2. Click on the Java preferences

Screen Shot 2014-01-14 at 7.46.54 PM

3. In the Java Control Panel window, select the Security tab.

Screen Shot 2014-01-14 at 7.39.09 PM

4. Click the Edit Site List… button

Screen Shot 2014-01-14 at 7.53.16 PM

5. In the Exception Site List window, click the Add button.

Screen Shot 2014-01-14 at 9.08.44 PM

6. Enter the site(s) you want to whitelist.

Note: If you are adding sites starting with HTTP, you will have to confirm that you want to add the site.

Screen Shot 2014-01-14 at 7.55.53 PM

7. When finished, click the OK button.

Screen Shot 2014-01-14 at 8.36.59 PM copy

8. Click the Apply button if needed.

9. Click the OK button to close the Java Control Panel window.

Screen Shot 2014-01-14 at 8.37.11 PM

10. Close System Preferences.

Lowering the security level

It is also possible to lower the security level to Medium, which is the least secure setting. At this security level, all Java applications are allowed to run after presenting a security prompt.

To set the security level to Medium on Mac OS X 10.7.x – 10.9.x:

1. Open System Preferences

2. Click on the Java preferences

Screen Shot 2014-01-14 at 7.46.54 PM

3. In the Java Control Panel window, select the Security tab.

Screen Shot 2014-01-14 at 7.39.09 PM

4. Move the Security Level slider from High to Medium.

Screen Shot 2014-01-14 at 7.39.19 PM

5. Click the Apply button.

Screen Shot 2014-01-14 at 7.39.26 PM

6. Click the OK button to close the Java Control Panel window.

Screen Shot 2014-01-14 at 7.39.45 PM

7. Close System Preferences.

If all goes well, you should now be able to run the needed Java applet.

Screen Shot 2014-01-14 at 7.40.58 PM

Screen Shot 2014-01-14 at 7.41.06 PM

Categories: Java, Mac administration
  1. Cesar
    January 15, 2014 at 5:08 pm

    For those looking to automate this the exception.sites file is located at ~/Library/Application Support/Oracle/Java/Deployment/security. You can append all of your Juniper VPN sites to the file. It does not impact the previous version of Java if you create the file and push it to that location.

    • Dean Thomas
      April 30, 2014 at 4:46 pm

      I do not see the folder you stated, only see ~/Library/Application Support/Oracle/Java/ and 2 files within this director.

  2. Mdunlap
    January 15, 2014 at 6:09 pm

    This worked, thank you so much!

  3. Uli
    January 15, 2014 at 7:11 pm

    Thank you very much!! This was driving me nuts. Happy to find somebody explaining this the day after the update is released!

  4. AdraKP
    January 16, 2014 at 2:46 am

    I am working with windows here. When I go to the security label, my only button is manage certifications and there is no “edit site list” … any suggestions as to what my next move should be?

    • gaelic
      January 21, 2014 at 6:47 pm

      AdraKP:

      I was not able to see the “Edit Site List” button either. I had to download the 64-bit version and install manually. This updated the Java Control Panel

      http://www.java.com/en/download/manual.jsp

      • niaconis
        September 30, 2014 at 3:54 pm

        Thanks for posting your reply. I installed the 64-bit version and now the Java Control Panel contains the Edit Site List button.

  5. AdraKP
    January 16, 2014 at 2:49 am

    Working with Windows 7

  6. delia
    January 16, 2014 at 8:32 am

    I have updated my Java to Java 7 51. and now I have much more problems because I cannot connect anything. I couldn’t try your script.

    Java Plugin 10.51.2.13
    Usando versión de JRE 1.7.0_51-b13 Java HotSpot(TM) 64-Bit Server VM
    Directorio de inicio del usuario = /Users/…

    Missing Application-Name manifest attribute for: https://…es/dana-cached/sc/JuniperSetupClientApplet.osx.jar

  7. Vinny
    January 16, 2014 at 10:08 pm

    for Windows 7, go to advanced tab and turn on Java Console. Then you should see this in your start menu. The Java Console has the Site List options.

    • Ben
      August 27, 2014 at 2:15 am

      Where?

  8. entele
    January 20, 2014 at 1:24 pm

    oh god, nothing helps! I’ve tried everything. since the java 7 update 51 nothing works on my mac. i simply can’t open the applets of java chatrooms or games. several sites are affected.

    from the start, i moved the security level down to medium, i add all the domains to the exception site list. and after I did that, I was able to enter the chat rooms once.
    for 3 days now i’m trying in vain to reload the sites, to deinstall and install java again…

    my default browser is safari, and firefox for example says: java plugin is missed. even though java is installed 10 times. :(

    (sry for my bad english)

    • Laurie
      March 14, 2014 at 9:36 pm

      so true! Alas and alack, i have an older iMac and this also happens with the new Windows 8 laptop that i bought 1 month ago! am so frustrated! Have tried what youve tried and still nothing helps.. :(

  9. Dat
    January 21, 2014 at 1:24 pm

    Tried everything and nothing has worked but i finally managed to get it running a few minutes ago. First turn your security level down to medium and untick enable java content in the browser and click apply. SImply click apply again and it should work. Worked for me :)

  10. DM
    January 23, 2014 at 10:37 pm

    Thanks for posting this! It worked for me.

  11. January 26, 2014 at 5:23 pm

    Sorry for my poor english, I’m only a stupid frenchie. The daily use of our own computer becomes more and more difficult. Something works today but no more tomorrow. Why ? Only because softwares developers include new “security function”, without any previous information, any documentation… and we loose a lot of time to try to understand where is the problem ! Fortunately,sites like this one are existing, that prevents some suicides. :-) Regards

  12. Jon
    January 27, 2014 at 10:41 pm

    Thanks. That was very helpful.

  13. Maheish
    January 30, 2014 at 4:34 am

    Thank you! It worked but I am facing another issue now. I have Java 7 Update 51 and recently updated Safari to 6.1.1, After i updated Safari, when i connect to vpn, internet is blocked. When i sign out in Network Connect, internet works. Without internet, my purpose of connecting to vpn becomes a waste. Any help is very much appreciated.

  14. Chris
    February 1, 2014 at 4:02 pm

    Awesome – thank you sooooo much!

  15. Thomas
    February 9, 2014 at 2:54 pm

    Thank you very much!

  16. Keith
    March 7, 2014 at 1:21 pm

    Worked like a charm on Windows 7. Thanks!

  17. Laurie
    March 14, 2014 at 9:30 pm

    i have been a player of Yahoo Spades for over 20 years. I have an older iMac, OS : 10.5.8 Lately, i get all the way into the game rooms/lounges, and join a table. Then it kicks me out and whole internet goes out. Of course internet comes back immediately, but same thing happens every time i go to Yahoo Spades site. What am i going to do? Also, i have a new Windows 8 pc that wont let me play this game either!

  18. xyverz
    April 1, 2014 at 3:42 am

    Thank you for this. I was able to use this on OSX to resolve an issue I had. Worked like a charm. =D

    • Natalie
      April 24, 2014 at 1:01 pm

      Thank you so very much for posting this information!!!

  19. April 24, 2014 at 3:06 pm

    Is there a way to inject those settings via a postflight script so that when I install the pkg from oracle, I can have my exceptions added and the security settings set to medium?

  20. April 24, 2014 at 3:13 pm

    I wanted to add that I did a script for Windows where it searches for previous versions of Java, uninstalls them and then proceeds to install the newest version and configures it for no updates and other switches, in case anyone wants it… but I need to find a way to do the same for my mac clients.

  21. LostInTheTrees
    May 29, 2014 at 12:11 am

    Very much appreciated!!!

  22. John
    May 30, 2014 at 7:07 pm

    Thanks it worked.

  23. Brad
    June 13, 2014 at 2:30 pm

    What if the applet I’m trying to run is from a downloaded JNLP file, rather than a website? Is there are way to have that automatically be cleared by Security without having to lower it to medium?

  24. Kanchana
    July 9, 2014 at 10:47 am

    Woks like a Charm,,, thanks a lot

  25. mechtild
    August 6, 2014 at 12:27 pm

    For Windows7: First went to Control Panel & clicked on Java. On the Advanced menu clicked on Show Console. Apply. Backed out. Then went to the Start menu & clicked on “Show All Programs”. A menu opened with a folder for Java. Clicked on the folder and a list of options was shown. Clicked on “Configure Java”. Clicked on that & the Console opened. Clicked on Security tab. There it was…the Edit Site List.

  26. tholly
    August 7, 2014 at 4:38 pm

    mechtild — Thank you !! Your detailed instructions were “exactly” what I needed.

  27. Dhaany
    August 14, 2014 at 11:55 pm

    thank you so much… solved.

  28. Scott
    August 23, 2014 at 4:03 am

    I see a lot of good info here but I don’t have a Java Control Panel, and there is no file to edit in ~/Library/Application Support/Oracle/Java/. Any other tips please? thanks (Mac Mavericks user)

  29. tomtul2
    September 4, 2014 at 4:05 pm

    Thank you. I couldn’t open eTime from ADP in Chrome (after a Java update?). My Java version is 1.7.0.67 (on Windows 7).
    in Java Configure, Security, I put in a site exception for https://eetd2.adp.com .
    eTime now comes up though the UI looks somewhat different. Haven’t tried to use it yet.

  30. Ben
    September 9, 2014 at 1:07 pm

    Can someone figure out this for me? I have a program I am trying to run. It is at this site: http://docs.desktop.aero/adw/html/index.html
    I figured out a way to get to the site list. I have the 64 bit and the 32 bit. Used Chrome. Windows 8.1. Can someone help???

  31. September 23, 2014 at 12:03 am

    Yay this worked! Thank you!!

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 155 other followers

%d bloggers like this: