Oracle released version 7u51 of Java on Tuesday. Along with the update’s release, they flipped the switch on a security setting to block unsigned or self-signed Java applets. This impacts previous version of Java 7 but not Java 6. As a result, if you have Java 7 installed and try to run a Java application, you may get a message like the following that says:

“Application Blocked by Security Settings
Your security settings have blocked a self-signed application from running.”

We deploy our application as a JNLP launch file and/or as a webpage applet. I have a customer that updated his MAC OSX system to the latest Java Version 1.840. After upgrading the JNLP launch stopped working. It seems to start Java (flashes blue java logo) then stops. No Exception is thrown. I suspect yet another OSX security hurdle. Java Version 8 Update 25 no longer gives you the Option to lower security level to Medium. Now only have option of High or Very High. When I tried connecting to an Avocent DSR1021 via the esss% I would get the same message everyone else was experiencing even though I had it set to High and added the https address to the Exception Site List. Im having issues with my installed java 8 update 102.its showing yoyr security settings have blocked a self-signed in application from running.i have tried to use the exemption solution on the java control panel but its not adding the site. I have a web application that uses Java 6 update 22 and was working fine until yesterday and now all of sudden when I try to load a form from my application it says 'Application Blocked by Security Setting' I can't update to the latest Java b/c it's not compatible and I can't set the Java security setting to Medium from high since it is a risk.

Java 7u51 introduced a security exception list where you can list domains that should be allowed to run Java applications that would be blocked on the default High security setting because they are self-signed or unsigned. The update also cleared all previous security messages that users have checked the box to always remember an application and not warn about security concerns.

To add a site to the exception list, you can find the Security tab on the Java Control Panel (through the Windows Control Panel).

You can click on the Edit Site List button to get a simple interface to whitelist sites that should be allowed to run. You may have to include the full URL and the port for the exception site list to work with your application.

The file is just a simple text file with each site listed per line stored at %userprofile%AppDataLocalLowSunJavaDeploymentsecurityexception.sites

I put my exceptions in through the Java Control Panel. I then copied the file to a central server and deployed it to the network to add our default exceptions. You can use a script or a group policy preference to push out your master list and you now have a managed Java site exceptions list. I went the route of the group policy preference to push a file to users. So far, it seems to have worked out pretty well.

Application Blocked By Java 8 Security Mac

Mac

Java Security Blocked

For the Mac side, you can do the same thing. Under System Preferences, go to the Java Control Panel. Switch to the Security tab and add your application’s domain to the site exception list.