Detections
Analytics

JRE0060-J72K7 - Configuration file must contain keys and values to deploy settings correctly. - '(x86) deployment.system.config.mandatory'

Information

This configuration file must hold values of the location of the deployment.properties file as well as the enforcement of these properties. Without a proper path for the properties file, deployment would not be possible. If the path specified does not lead to a properties file the value of the 'deployment.system.config. mandatory' key determines how to handle the situation. If the value of this key is true, JRE will not run if the path to the properties file is invalid.

Solution

If the deployment.config file does not exist, create the file. The deployment.config file is a text file containing 2 keys. They are:

deployment.system.config =
deployment.system.config.mandatory =

On 32-bit systems the deployment config file should be located at:
C:\Program Files\Java\jre7\lib\deployment.config

On 64-bit systems there can be 2 locations for the deployment.config file. One is for 32 bit JRE and the other for 64 bit JRE:

64 bit - C:\Program Files\Java\jre7\lib\deployment.config
32 bit - C:\Program Files (x86)\Java\jre7\lib\deployment.config

Include the following keys and values in the appropriate deployment.config file based upon your system architecture.

If you are running both a 32 bit and a 64 bit JRE, you need to update both deployment.config files. The following are examples, drive letters may vary.

32 bit
'deployment.system.config=file:C\:\\Program Files (x86)\\Java\\jre7\\lib\\deployment.properties'
'deployment.system.config.mandatory=false'.

64 bit
'deployment.system.config=file:C\:\\Program Files\\Java\\jre7\\lib\\deployment.properties'
'deployment.system.config.mandatory=false'.

See Also

http://iase.disa.mil/stigs/app_security/app_sec/u_jre7_v1r4_stig.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CSCv6|3.1, Rule-ID|SV-43644r2_rule, STIG-ID|JRE0060-J72K7, Vuln-ID|V-32842

Plugin: Windows

Control ID: 87699281ad8728df4ce23616c6b2c16e4694c13c10a0264e2b059bebe4f4a141