Issue:
After using the JRE Configuration Tool with PowerChute Business Edition v9,5, the JRE java.security file stored in the installed directory needs to be edited. This is due to increased security with PowerChute v9.5.

Product:
PowerChute Business Edition v9.5

Environment:
All supported operating systems

Solution:

Follow the steps detailed below to locate the java.security file is located and edit it.

Windows

Location of the java.security file:

1. Navigate to the installed directory of PowerChute. If the default location was chosen during installation, this will be C:\Program Files\APC\PowerChute Business Edition or C:\Program Files (x86)\APC\PowerChute Business Edition depending on your operating system.
2. Navigate to \JreConfigTool\<JRE>\lib\security. For example: \JreConfigTool\1.8.0_152\lib\security.
3. The java.security file is listed in the security folder.

Editing the java.security file:

1. Open the java.security file using an ASCII text editor such as Notepad.
2. Find the following text in the file (on line 569):

jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224

1. Change the text to read:

jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
RSA keySize < 2048, DSA keySize < 1024, EC keySize < 224

1. Save and close the java.security file.

After editing the java.security file, restart the PCBE service.

Linux

Location of the java.security file:

1. Navigate to the installed directory of the JRE used with the JRE Configuration Tool. For example, if the JRE is stored on your desktop, this will be /root/Desktop/<JRE> (e.g., /root/Desktop/jre1.8.0_152).
2. Navigate to the security folder, /<JRE>/lib/security.
3. The java.security file is listed in the security folder.

Editing the java.security file:

1. Open the java.security file using an ASCII text editor such as vi editor.
2. Find the following text in the file:

jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224

1. Change the text to read:

jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
RSA keySize < 2048, DSA keySize < 1024, EC keySize < 224

1. Save and close the java.security file.

After editing the java.security file, restart the PCBE service.

NOTE: This issue is fixed in with the release of PowerChute Business Edition 10 which no longer uses the JRE Configuration Tool.

Released for:Schneider Electric New Zealand