Knowledge Center

Legacy ePolicy Orchestrator installs are distributed without a Java Runtime Environment
Technical Articles ID:   KB89799
Last Modified:  6/11/2019


All McAfee ePolicy Orchestrator (ePO) versions earlier than 5.10, 5.9.1, 5.3.3


On November 30, 2017, all ePO install packages earlier than 5.3.3 and 5.9.1 were reposted without a Java SE Runtime Environment (JRE). Also, all hotfixes published before November 30, 2017, that incremented Java were removed from all download sites. If you already had an existing ePO installation, or downloaded an install package before November 30, 2017, this change has no impact on you. Also, if you had previously downloaded a legacy installation package for ePO that contains a JRE, McAfee recommends that you retain it so you can use it to reinstall ePO, if the future need arises.
ePO 5.3.3, ePO 5.9.1, ePO 5.10, and subsequent ePO releases ship with, and install, an updated JRE. 

Frequently Asked Questions
What if I need to install an older version of ePO, or reinstall my existing version of ePO, for disaster recovery purposes?
Older install packages are available, but you must download the JRE component separately per the installation instructions provided below.
Can I contact Technical Support for an older version of ePO which has a JRE included?
No. McAfee does not distribute or provide a copy of ePO earlier than 5.3.3 or 5.9.1 that includes a JRE. You must download the JRE separately, per the instructions below.

What versions of ePO are reposted without a JRE?
The following versions of ePO are available without the JRE component included:
  • 5.1.0
  • 5.1.1
  • 5.1.2
  • 5.1.3
  • 5.3.0
  • 5.3.1
  • 5.3.2
  • 5.9.0
What about hotfixes that increment Java?
All hotfixes that increment Java were removed from the Product Downloads site on November 30, 2017. The following options are available to customers who need to increment Java:
  • Upgrade to ePO 5.3.3 or later, or ePO 5.9.1 or later.

    These versions of ePO include a JRE, and McAfee releases hotfixes that increment Java on these releases as needed.
  • Perform a disaster recovery on ePO with a reposted package that does not include a JRE. To reinstall ePO, follow the instructions in the Solution of this article if you want to remain on an older version of ePO with a more recent Java version. Step 1 of the solution below lists the most recent versions of Java that are supported in the specified versions of ePO.

The following table lists all hotfixes and Hotfix Release Notes for ePO that were pulled from the download site on November 30, 2017:
Hotfix Package Release
SB10119 EPO5xHF1063194.zip PD25965
SB10141 EPO5xHF1102635.zip
SB10148 EPO5xHF1124228.zip PD26354
SB10159 EPO5xHF1133331.zip PD26501
SB10166 EPO5xHF1151890.zip PD26661
SB10186 EPO5xHF1178101.zip PD26876
SB10200 EPO51x53xHF1191750.zip

Can I upgrade my McAfee ePO server to any JRE version? What if I want to upgrade to the latest version available?
Only JRE versions with which McAfee has completed Quality Assurance (QA) testing are supported.

See the Solution below for instructions on how to download the appropriate JRE version and use it to install ePO. The reposted installation packages block any attempt to install ePO using a JRE version not listed in the chart in step 1 of the following Solution. Only the specified, reposted installation packages allow you to select a custom JRE install location. All other ePO install packages ship with a JRE and can only be installed with the JRE that is included in the package. 

How does this change affect the supported ePO upgrade paths?
This change has no effect on the supported ePO upgrade paths. The supported upgrade paths listed in KB51569 still apply. 

I understand Oracle is now charging for Java SE. To continue using ePO 5.9.0 or 5.3.2 (or earlier), am I required to pay Oracle a license fee?
No. Oracle's pricing change only requires you to pay a license fee for updates to Java SE 7 or 8. You can continue to use the older versions free of charge.
NOTE: You are not required to pay any additional license fees to Oracle, if you use ePO 5.3.3 (or later) or 5.9.1 (or later).


  • The following instructions apply if you install, upgrade, or restore ePO and use a package that does not include a JRE.
  • None of these steps apply to ePO 5.3.3 (and later), 5.9.1 (and later) or ePO 5.10 (and later), nor any subsequent major release of ePO.
  1. Identify the JRE for ePO 5.x or the Java SE Development Kit (JDK) for ePO 4.6.x to download.

    Use the following table to identify the JRE or JDK based on the version of ePO you install. Only the following JRE or JDK versions listed are supported with the specified version of ePO. Do not download the latest available JRE or JDK version because the installer blocks the install if the specific JRE version listed below is not used:
    ePO Version JRE/JDK Version JRE/JDK file name
    4.6.8 1.7.0_76 (32-bit) jdk-7u76-windows-i586.exe
    4.6.9 1.7.0_80 (32-bit) jdk-7u80-windows-i586.exe
    5.1.0 1.7.0_45 jre-7u45-windows-x64.exe
    5.1.1 1.7.0_80 jre-7u80-windows-x64.exe
    5.1.2 1.7.0_80 jre-7u80-windows-x64.exe
    5.1.3 1.8.0_131 jre-8u131-windows-x64.exe
    5.3.0 1.7.0_80 jre-7u80-windows-x64.exe
    5.3.1 1.8.0_131 jre-8u131-windows-x64.exe
    5.3.2 1.8.0_131 jre-8u131-windows-x64.exe
    5.9.0 1.8.0_144 jre-8u144-windows-x64.exe

  2. Download the appropriate version of Java based on the table in step 1:
  3. Download and unzip the appropriate Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files based on the major version of Java you are installing:
  4. Install the JRE (ePO 5.x) or JDK (ePO 4.6.x) you downloaded in step 2 on the McAfee ePO server using these instructions:

    NOTE: For ePO 5.x, you install a JRE. For ePO 4.x, you must install a JDK to get all components ePO requires. The process is nearly identical, but the exact installation steps differ slightly, as noted below.

    JRE installation instructions for ePO 5.x:
    1. To start the install, run the executable on the McAfee ePO server.
    2. Select the Change destination folder box and click Install.
    3. Make a note of the path where JRE is being installed. You can change the path, but you need to know the path in a later step.
    4. Click Next.
    5. Deselect any Java versions listed.

      If you get an "Out-of-Date Java versions Detected" warning, click Uninstall, Next.

      This action prevents older versions of Java from being uninstalled in case they are used by other applications on the server. You can uninstall them through the Programs and Features section of Windows later, if you determine they are not needed.
    JDK installation instructions for ePO 4.6.x:
    1. To start the install, run the executable on the McAfee ePO server.
    2. Click Next, Next, and wait for the JDK to finish installing.

      The JRE install starts automatically immediately after the JDK install completes.
    3. Make a note of the path where JRE is being installed. You can change the path, but you need to know the path in a later step.
    4. Click Next, then click Close.
  5. Unzip the archive you downloaded in Step 3. Place the three files inside the archive in the <JRE install path you noted in Step 4c>\lib\security folder, and replace the identically named files that currently exist in that directory.
  6. Install ePO following the standard process (see the Installation Guide for the appropriate version of ePO if you are unsure of the steps).

    A new dialog appears in the install wizard.
  7. Type the path to the JRE install you noted in step 4c when you see the section of the install wizard titled Specify JRE Location, then complete the ePO installation.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.