Legacy ePolicy Orchestrator installs are distributed without a Java Runtime Environment

Technical Articles ID: KB89799
Last Modified: 1/24/2020

Environment

All McAfee ePolicy Orchestrator (ePO) versions earlier than 5.10, 5.9.1, 5.3.3

Summary

On November 30, 2017, all ePO install packages earlier than 5.3.3 and 5.9.1 were reposted without a Java SE Runtime Environment (JRE). Also, all hotfixes published before November 30, 2017, that incremented Java were removed from all download sites. If you already had an existing ePO installation, or downloaded an install package before November 30, 2017, this change has no impact on you. Also, if you had previously downloaded a legacy installation package for ePO that contains a JRE, McAfee recommends that you retain it so you can use it to reinstall ePO, if the future need arises.

ePO 5.3.3, ePO 5.9.1, ePO 5.10, and subsequent ePO releases ship with, and install, an updated JRE.

Frequently Asked Questions

What if I need to install an older version of ePO, or reinstall my existing version of ePO, for disaster recovery purposes?

Older install packages are available, but you must download the JRE component separately per the installation instructions provided below.

Can I contact Technical Support for an older version of ePO which has a JRE included?

No. McAfee does not distribute or provide a copy of ePO earlier than 5.3.3 or 5.9.1 that includes a JRE. You must download the JRE separately, per the instructions below.

What versions of ePO are reposted without a JRE?

The following versions of ePO are available without the JRE component included:

5.1.0
5.1.1
5.1.2
5.1.3
5.3.0
5.3.1
5.3.2
5.9.0

What about hotfixes that increment Java?

All hotfixes that increment Java were removed from the Product Downloads site on November 30, 2017. The following options are available to customers who need to increment Java:

Upgrade to ePO 5.3.3 or later, or ePO 5.9.1 or later.

These versions of ePO include a JRE, and McAfee releases hotfixes that increment Java on these releases as needed.
Perform a disaster recovery on ePO with a reposted package that does not include a JRE. To reinstall ePO, follow the instructions in the Solution of this article if you want to remain on an older version of ePO with a more recent Java version. Step 1 of the solution below lists the most recent versions of Java that are supported in the specified versions of ePO.

The following table lists all hotfixes and Hotfix Release Notes for ePO that were pulled from the download site on November 30, 2017:

Security Bulletin	Hotfix Package	Release Notes
SB10119	EPO5xHF1063194.zip	PD25965
SB10141	EPO5xHF1102635.zip EPO5xHF1102635.zip	PD26270
SB10148	EPO5xHF1124228.zip	PD26354
SB10159	EPO5xHF1133331.zip	PD26501
SB10166	EPO5xHF1151890.zip	PD26661
SB10186	EPO5xHF1178101.zip	PD26876
SB10200	EPO51x53xHF1191750.zip EPO590HF1191751.zip	PD27097 PD27096

Can I upgrade my McAfee ePO server to any JRE version? What if I want to upgrade to the latest version available?

Only JRE versions with which McAfee has completed Quality Assurance (QA) testing are supported.

See the Solution below for instructions on how to download the appropriate JRE version and use it to install ePO. The reposted installation packages block any attempt to install ePO using a JRE version not listed in the chart in step 1 of the following Solution. Only the specified, reposted installation packages allow you to select a custom JRE install location. All other ePO install packages ship with a JRE and can only be installed with the JRE that is included in the package.

How does this change affect the supported ePO upgrade paths?
This change has no effect on the supported ePO upgrade paths. The supported upgrade paths listed in KB51569 still apply.

I understand Oracle is now charging for Java SE. To continue using ePO 5.9.0 or 5.3.2 (or earlier), am I required to pay Oracle a license fee?
No. Oracle's pricing change only requires you to pay a license fee for updates to Java SE 7 or 8. You can continue to use the older versions free of charge.
NOTE: You are not required to pay any additional license fees to Oracle, if you use ePO 5.3.3 (or later) or 5.9.1 (or later).

Solution

IMPORTANT:

The following instructions apply if you install, upgrade, or restore ePO and use a package that does not include a JRE.
None of these steps apply to ePO 5.3.3 (and later), 5.9.1 (and later) or ePO 5.10 (and later), nor any subsequent major release of ePO.

Identify the JRE for ePO 5.x or the Java SE Development Kit (JDK) for ePO 4.6.x to download.

Use the following table to identify the JRE or JDK based on the version of ePO you install. Only the following JRE or JDK versions listed are supported with the specified version of ePO. Do not download the latest available JRE or JDK version because the installer blocks the install if the specific JRE version listed below is not used:

ePO Version	JRE/JDK Version	JRE/JDK file name
4.6.8	1.7.0_76 (32-bit)	jdk-7u76-windows-i586.exe
4.6.9	1.7.0_80 (32-bit)	jdk-7u80-windows-i586.exe
5.1.0	1.7.0_45	jre-7u45-windows-x64.exe
5.1.1	1.7.0_80	jre-7u80-windows-x64.exe
5.1.2	1.7.0_80	jre-7u80-windows-x64.exe
5.1.3	1.8.0_131	jre-8u131-windows-x64.exe
5.3.0	1.7.0_80	jre-7u80-windows-x64.exe
5.3.1	1.8.0_131	jre-8u131-windows-x64.exe
5.3.2	1.8.0_131	jre-8u131-windows-x64.exe
5.9.0	1.8.0_144	jre-8u144-windows-x64.exe

Download the appropriate version of Java based on the table in step 1:
- For Java version 1.7.0_XX:
  
  Java SE 7: http://www.oracle.com/technetwork/java/javase/downloads/java-archive-downloads-javase7-521261.html
- For Java version 1.8.0_XX:
  
  Java SE 8: http://www.oracle.com/technetwork/java/javase/downloads/java-archive-javase8-2177648.html
  
  NOTE: You must create an account and log on to the site before you can download the package.
Download and unzip the appropriate Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files based on the major version of Java you are installing:
- JAVA 7 (1.7.0_XX): http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
- JAVA 8 (1.8.0_XX): http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html
Install the JRE (ePO 5.x) or JDK (ePO 4.6.x) you downloaded in step 2 on the McAfee ePO server using these instructions:

NOTE: For ePO 5.x, you install a JRE. For ePO 4.x, you must install a JDK to get all components ePO requires. The process is nearly identical, but the exact installation steps differ slightly, as noted below.

JRE installation instructions for ePO 5.x:
1. To start the install, run the executable on the McAfee ePO server.
2. Select the Change destination folder box and click Install.
3. Make a note of the path where JRE is being installed. You can change the path, but you need to know the path in a later step.
4. Click Next.
5. Deselect any Java versions listed.
  
  If you get an "Out-of-Date Java versions Detected" warning, click Uninstall, Next.
  
  This action prevents older versions of Java from being uninstalled in case they are used by other applications on the server. You can uninstall them through the Programs and Features section of Windows later, if you determine they are not needed.
JDK installation instructions for ePO 4.6.x:
1. To start the install, run the executable on the McAfee ePO server.
2. Click Next, Next, and wait for the JDK to finish installing.
  
  The JRE install starts automatically immediately after the JDK install completes.
3. Make a note of the path where JRE is being installed. You can change the path, but you need to know the path in a later step.
4. Click Next, then click Close.
Unzip the archive you downloaded in Step 3. Place the three files inside the archive in the <JRE install path you noted in Step 4c>\lib\security folder, and replace the identically named files that currently exist in that directory.
Install ePO following the standard process (see the Installation Guide for the appropriate version of ePO if you are unsure of the steps).

A new dialog appears in the install wizard.
Type the path to the JRE install you noted in step 4c when you see the section of the install wizard titled Specify JRE Location, then complete the ePO installation.

Affected Products

ePolicy Orchestrator 5.9
ePolicy Orchestrator 5.10.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

German
English United States
Spanish Spain
French
Italian
Japanese
Korean
Dutch
Portuguese Brasileiro
Chinese Simplified
Chinese Traditional

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Legacy ePolicy Orchestrator installs are distributed without a Java Runtime Environment

Environment

Summary

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Legacy ePolicy Orchestrator installs are distributed without a Java Runtime Environment

Environment

Summary

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title