I previously wrote up my process as an article for installing Java 7 update 51 as a manged software delivery. Figured I’d do another article for java 8 for a spot to crowdsource from the community as I always learn from comments how to improve how I do things in CMS. Don't forget support for Java 7 ends in April!
Download the latest offline .exe installer (you won’t see the 64 bit offline installer unless using 64 bit windows). Note that Oracle recommends 32 bit Java unless for some reason you use 64bit browsers - we use the 32 bit download.
Our deployment.config file contains these 2 lines deployment.system.config.mandatory=true deployment.system.config=file:\\C\:\\Windows\\Sun\\Java\\Deployment\\deployment.properties
Our deployment.properties file is following deployment.expiration.check.enabled=false deployment.security.mixcode=HIDE_RUN deployment.javaws.shortcut.locked deployment.javaws.shortcut=NEVER
You can add more options to the properties file based on what’s available in the current release. See http://docs.oracle.com/javase/8/docs/technotes/guides/deploy/properties.html
The folder on the desktop should now have 3 files, deployment.config, deployment.properties, & .msi file.
Note: As of Java 8u20, there is no more Medium security level support. Any sites that don’t conform to Java’s security practices will be blocked. If you have sites in your organization you want to whitelist, you can do so with a third text file exception.sites. Make sure to set the deployment.user.security.exception.sites value in deployment.properties if you do this. I am not using that as our high profile sites all loaded without it, but you can get more info here
Note: I originally had IEXPLORER and MOZILLA keys in the command line, but they didn’t end up in the registry, so I don’t think they’re supported anymore, so I removed them. Anyone know if any of that is documented anywhere?
xcopy "C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{9f283b6e-34b5-4e23-a171-82d3axxxxxxx}\cache\deployment.config" C:\Windows\sun\java\deployment\ /y xcopy "C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{9f283b6e-34b5-4e23-a171-82d3axxxxxxx }\cache\deployment.properties" C:\Windows\sun\java\deployment\ /y reg add "HKLM\Software\JavaSoft\Java Update\Test" reg delete "HKLM\Software\JavaSoft\Java Update" /f
This is what my policy looks like
Installing java with the browser opened seems to continue to cause issues. I saw some machines in add/remove programs saying the app was installed, but it didn’t work in the browser and there was no control panel icon. So, I set the policy to only run if no user logged in under schedule – advanced options
I also set the advanced settings for the software install to only run “only when no user is logged on.” This is probably not necessary, but I thought it was a failsafe.
Our users typically leave machines in locked or powered off states, so my plan is to leave these ‘install at logout’ precautions in place for a week or 2 and then eventually set it to run whenever for all users not yet updated and deal with the corrupted installs that happen manually. I’m happy so far in first few days of policy being on about half of users have been updated.
To maintain Java, I have some filters set up.
SELECT sw._ResourceGuid [Guid] FROM [vSoftwareComponent] sc inner join [Inv_InstalledSoftware] sw on sw.[_SoftwareComponentGuid] = sc.[Guid] where sc.[Name] LIKE '%JAVA%' and sw.[InstallFlag]=1
Also, note that ITMS/CMS server dependency for Java 8 should be addressed with 8.5 RU2
Java 8 update 201 came out last week. Please be aware of new licensing rules with Java 8 for non personal use.
The public availability of Java SE 8 updates from Oracle has been extended to January 2019. Oracle will continue to provide consumers with updates for personal (non-corporate, non-commercial) use of Java SE 8 through at least the end of 2020. Applets will continue to be supported in Java SE 8 until at least March, 2019, pending continued support by browser vendors, after which they may be removed at any time.
Java Client roadmap - http://www.oracle.com/technetwork/java/javase/javaclientroadmapupdate2018mar-4414431.pdf
“Public updates for Oracle Java SE 8 will remain available for individual, personal use through at least the end of 2020. Public updates for Oracle Java SE 8 released after January 2019 will not be available for business, commercial or production use without a commercial license.”
https://java.com/en/download/release_notice.jsp
Java 8 update 191 is out
java 8 update 181 is out.
Java 8 update 171 is out.
Java 8 update 161 is out.
java 8 update 151 is out.
8u144 was released.
Java SE Runtime Environment 8u141 is out.
FYI - Java 8 update 121 is out.
Not seen that before either, but since it relates to Java SE I suspect that would be a licensable product i.e. Oracle will come asking for money to use it, as per the Register article I linked to. Sneaky that it doesn't state anywhere that it is, but I think that's the reason many of Oracle's customers are angry about this.
@chris - have you ever seen this document before? I hadn't, but it looks like you may be able to use the .exe on that webpage and customize the installer via a config file? Am I missing something obvious? haven't had a chance to try it.
http://docs.oracle.com/javase/8/docs/technotes/guides/install/config.html
I wonder how Java feels about people pushing the pkg installer for JRE for Macs. No mention of that anywhere that I can find.
See this page: https://www.java.com/en/download/help/msi_install.xml
Note the bit at the very bottom that says:
Although information is available in the public domain explaining steps to extract the .msi file from the installer for deployment through Active Directory based network, this practice is unsupported, installations done using this method might not work correctly, and Oracle can not guarantee that future Java updates will continue to allow extracting the .msi file.
On top of that it also seems they are deploying an army of auditors to ensure that the components that you are using are licenced properly (or that you have a corresponding support contract):
http://www.theregister.co.uk/2016/12/16/oracle_targets_java_users_non_compliance/
At the moment I think the MSI extractable .exe still works. But for how long? Anyone using the Enterprise JRE MSI Installer (the one you have to pay for)? Does it offer anything different?
We are getting ready for a mass Java update here. Just some info to pass along...
You can use REMOVEOLDERJRES=1 in the command line to remove older versions within the same version family. Just tested and it works. We had Java 8 Update 77 on a machine and ran Java 8 Update 101 and it removed Update 77 and replaced with 101.
Java 8 update 101/102 is available at links in original post. The file location of the msi didn't change for me.
Note: if you right click on the .exe and do run as administrator (or another user), you'll need to look for the file in that other user's locallow folder.
@chrismcevoy72 - sorry, for some reason I didn't get email updates on new posts in this thread. The new version of java should drop tomorrow. I'll post back if I have trouble getting the MSI on the new version.
I just used the usual installer from java.com, tried it a few days ago and the MSI was definitely available in the appdata path I mentioned above. Maythe problem is with the offline installer?
I downloaded the offline installer and no matter how I try there is no longer an msi file. I have run the exe and left it at the welcome screen and gone to the path provieded and the only version I can see is 8.72. It seems as if Orcale have released the latest version so it no longer creates an msi file. I have even tried doing a search on the drive but to no avail.
Download the .exe file from the java.com website and run it so that it gets to the first installation screen (no need to install it - just so that the "Welcome to Java" screen appears).
With that screen still running, navigate to c:\users\username\appdata\locallow\oracle\java and there will be a folder for the version you have downloaded - inside that folder is the .msi files.
Simply copy those files to a folder of your choice and use them for your software resource upload following the instructions in the main post of this thread.
I'm struggling to find the .cab and msi file for 8.91, it's not appearing in the folder, I can see previous files I created before for other releases.
Has Oracle changed the way that is now installed?
bump for java 8u91 released today
http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html
bump for 8u73 available now
FYI java 8 update 71/72 came out last week for anyone who may have missed it.
yea thanks eventually a friend pointed me to these helpful links.
http://www.oracle.com/technetwork/java/javase/cpu-psu-explained-2331472.html
https://www.java.com/en/download/faq/release_dates.xml
The version depends on which patch type you decided to go with previously.
Update - new Java updates came out yesterday. I'm not sure why, but 8u65 and 8u66 both came out at the same time.
http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html
Thank you for catching this. This was why I couldn't find the MSI file. Looks like Oracle tried an end-run around all the instructions on the web, hoping people would pony up for the subscription that gives you the MSI directly.
thanks - i updated paths in the article. I just flew past that not even noticing the change.
Now the Path has changed to the msi file in my case. The folder ist no longer "Sun", now its "Oracle".
C:\Users\<User>\AppData\LocalLow\Oracle\Java\jre1.8.0_60
C:\Users\<user>\AppData\LocalLow\Sun\Java\jre1.8.0_60 folder. I sent it out this week and didn't have any problems. The only way that folder will be there is if you opened the .exe installer (but didn't run it), just opened it.
I try to follow the steps with 8u60, but all I see in the ...\Sun\Java\jre1.8.0_31 folder is an LZMA_EXE file. No MSI anywhere.
I used to use a transform but found command line easier to edit with update. One less file to touch.
Sally:
Have you tried using orca to make a transform with the properties set for what you're doing with the MSI command line:
msiexec.exe /i "jre1.8.0_31.msi" AUTOUPDATECHECK=0 IEXPLORER=1 JAVAUPDATE=0 JU=0 MOZILLA=1 /qn ALLUSERS=2
Did you try the steps Sally outlined:
java 8 update 60 out. expires Oct 20th (same expiration date we had for 8u51).
You can use an 7-Zip or another zipping program to extract the msi from the exe
or you can try the silent switch with the exe
jre-8u51-windows-i586.exe /s
The latest version of Java does not have an MSI unless you buy a license. How woud I do this with an exe?
Never knew that existed. I'll take a look. So you just leave the .msi file in the C:\Windows\sun\java\deployment\ directory with the config files? Thanks for sharing, may make the process a bit simpler moving forward.
Thanks for this Sally - very useful. It's something we'll be doing before the April deadline for Java 7. Have you thought about using the static download location for the package (Advanced setting in the policy or the quick delivery), so that you don't have to use the cache UUID for the deployment config files script?
This is something we've done and it works well. It just means you don't have to keep editing the dependent task scripts everytime there is a new version, as long as you use the same temporary location on the client everytime. Just a thought.