Detections
Analytics

JRE0080-J72K7 - A properties file must be present to hold all the keys that establish properties within the Java control panel.

Information

The deployment.properties file is used for specifying keys for the Java Runtime Environment. Each option in the Java control panel is represented by property keys. These keys adjust the options in the Java control panel based on the value assigned to that key. By default no deployment.properties file exists; thus, no system-wide deployment exists. Without the deployment.properties file, setting particular options for the Java control panel is impossible.

Solution

Create the Java deployment properties file. The location of this file can vary.

For 32 bit systems:
C:\Program Files\Java\jre7\lib\deployment.properties.

For 64 bit systems you must check both the 64 bit and the 32 bit files in order for both runtimes to be affected.

C:\Program Files\Java\jre7\lib\deployment.properties
C:\Program Files (x86)\Java\jre7\lib\deployment.properties

Create a properties file entitled 'deployment.properties'.

At a minimum, the following keys must be present in the deployment.properties file.

deployment.security.askgrantdialog.notinca=false
deployment.security.askgrantdialog.notinca.locked
deployment.security.validation.crl=true
deployment.security.validation.crl.locked
deployment.security.validation.ocsp=true
deployment.security.validation.ocsp.locked

See Also

http://iase.disa.mil/stigs/app_security/app_sec/u_jre7_v1r4_stig.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CSCv6|3.1, Rule-ID|SV-43299r2_rule, STIG-ID|JRE0080-J72K7, Vuln-ID|V-32902

Plugin: Windows

Control ID: c539e0d60d80d2b0b3fca55d2b054a532db9dba74d0932a0a91faa7e2b231730