Changing java security restriction for “Network connect error” issue in KVM

This article is a godsend. Thank you Xiaoxiaoke!!!

Updated as of 11/2020 – the problematic item under disabledAlgorithms is “anon”, you can just remove that line item instead of removing all the other items in the list.

Additionally, running the jar from browser seems to always fail. There is a trick you can use to go into Java and launch the Jar from the Temporary Files button under the General tab in the Java control panel. You must attempt to run it from the browser first so the Avocent device knows to create your session and give you a config file to run.

Ke Xu | Geek World

I am using KVM to manage the servers in a rack. When launching the session jnlp files with javaws, I saw the “Network connect error” message. This is due to the default java security restriction on SSL/TLS algorithms. Need to change the security configuration file to solve this issue.

Environment: Dell KVM 4322DS

Linux:

1. Open the file /etc/java-7-openjdk/security/java.security as superuser

2. Comment out the line with the key jdk.tls.disabledAlgorithms

3. Add this line below and save the file:

jdk.tls.disabledAlgorithms=SSLv3, EC, ECDHE, ECDH

Windows:

1. Add the KVM IP into the exception site list

Open Control Panel -> Java

In Java Control Panel -> select Security tab -> Edit Site List -> Add the KVM IP “http://X.X.X.X

Open the file as admin: Windows -> Program Files (x86) -> Java -> jre1.8.0_51 -> lib -> security -> java.security

2. Comment out the line with the key jdk.tls.disabledAlgorithms

3. Add this…

View original post 59 more words

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s