Enterprise Services Repository contains both signed and unsigned code

[Former Member]

Hi all,

We are using Citrix to connect to the PI system to use the Enterprise Service builder. After working in the enterprise service builder app for anywhere from 10 to 30 minutes the following error pops up on the screen (in the Citrix session) “Java has discovered applications components that could indicate a security concern. Enterprise Services Repository contains both signed and unsigned code”. Do you want to block this? Yes or No. It doesn’t matter which response we take “Yes” or “No”, the app locks up. Once this happens we have to “End Task” the browser session and kill the Citrix session on the Citrix server to allow the PC to get back in through Citrix. Is there something that is Java related that causes this issue in the enterprise service builder app?

Regards

Kumar

[Former Member · Accepted solution]

It was resolved

CAUSE

Signed Java Web Start applications and applets that contain signed and unsigned components could potentially be unsafe unless the mixed code was intended by the application vendor. As of the Java SE 6 Update 19 release, when a program contains both signed and unsigned components, a warning dialog is raised.

SOLUTION

In the security dialog, if the user clicks Yes, it blocks potentially unsafe components from running, and the program may terminate. If the user clicks the No button, the application or applet continues execution.
Raising a warning is the default behavior, but there are options available for users to manage this situation.

You can manage how mixed code programs are handled through the Java Control Panel.

Find the Java Control Panel

» Windows
» Mac OS X

Mixed Code Protection Options in the Java Control Panel

1. 1.     In the Java Control Panel, click on the Advanced tab.
2. 2.     Expand the Mixed code (Sandboxed Vs. trusted) security verification option under the Security section.

Four levels of control are available.

Enable - show warning if needed

This is the default setting. When a potential security risk is encountered, a warning dialog is raised. Clicking Yes blocks potentially unsafe components from running and may terminate the program. When the user clicks No, the application or applet continues execution with protections (packages or resources that are later encountered with the same names but have different trust levels, i.e., signed vs unsigned, will not be loaded).

Enable - hide warning and run with protections

This option suppresses the warning dialog. The code executes as if the user had clicked No from the warning dialog.

Enable - hide warning and don't run untrusted code

This option suppresses the warning dialog and behaves as if the user had clicked Yes from the warning dialog.

Disable verification

This option is not recommended. This option completely disables the software from checking for mixing trusted and untrusted code, leaving the user to run potentially unsafe code without protections.