A new JVM will be pushed out by Oracle on Sunday, 19 January 2014. After this new JVM (version 1.7u51) is pushed out, IBM Domino applets will no longer work in browsers running the latest JVM. This document provides links to .zip files containing re-signed Java applets for Domino 8.x and 9.x. NOTE:
|Fix & Download information|
Fix Central ID
File name & download link
Steps to apply the new applets:
- Download and unzip the .zip file
- Shut down your Domino server (optionally you can quit HTTP task by issuing the following command at the server console: tell HTTP quit)
- Backup existing files
- Copy the new files into \Domino\data\domino\java
Files included in the .zip files:
- hotfix license
NOTE: The .jar files in the .zip files linked above are the same for both Domino versions 8.x and 9.x. The only difference in the two .zip files is a version specific hotfix license (i.e., one hotfix license for 8.x and one hotfix license for 9.x).
What issues do the new applets resolve?
The 1.7u51 JVM now requires applets to explicitly declare their name and desired permissions in the included manifest file. This is done before signing of the jar file and increases security of the JVM's browser plug-in.
- SPR# SODY9DDBD5 - Applets Report "Application: Unknown" In Java 7 Update 45, won't run in Java 7 Update 51
- SPR# SODY9FFEYE - Java applets in Domino require whitelist access in Java 7u51 in order to interact with.
Do these applets conflict with existing Interim Fixes or hotfixes?
No. The new applets do not conflict with existing Interim Fixes or hotfixes you have on your servers. You can copy these files to your server even if you have an Interim Fix or hotfix applied.
Besides manually replacing the .jar files, are there other options available to address this issue?
Are iNotes users impacted by this?
No. iNotes templates do not contain applets and are not impacted.
Are Notes Traveler servers impacted by this?
This issue does not affect Notes Traveler servers as they do not use applets. The issue is user interfacing applets surfaced through a browser. Since Notes Traveler's front end client is not a browser, it's not affected.
Are Notes clients impacted by this?
The only place it affects the client is with the Domino Designer feature to preview in the browser. The same applets/fixes will suffice.
What error message will you get if you have not updated the applets?
"Missing required Permissions manifest attribute in main jar"
|26 Feb 2014||Added error message|
|22 Jan 2014||Additional Q&A and note about hotfix license.|
|17 Jan 2014||Revised title and content to reflect fix availability.|
|17 Jan 2014||Initial publish.|
Internal Use Only
Note: Note these files will also work on 6.x and 7.x.
SODY9DDBD5 - Domino 9.0 / 9.0.1 Applets Report "Application: Unknown" In Java 7 Update 45
*** Hotfix already generated for this SPR by author: Mike Killoran/Westford/IBM on : Jan-15-2014
CodeStream: V901FP1 (Pending/Fixed)
CodeStream: V90 (Open/Reproduced)
CodeStream: V85 (Closed/No Plans To Fix in this Codestream)
SODY9FFEYE: () Java applets in Domino require whitelist access in Java 7u51 in order to interact with.
CodeStream: V90 (Pending/Software Limitation)
General Comments: We have seen this before, there is nothing we can do on the server to prevent this from occurring, the only options is not to have java script buttons execute applets, that would cause applications to break. The only options here are to refactor applications not to use applets from buttons and use some other mechanism to render data (like xpages).
29 September 2018