How to configure Java Liveupdate to authenticate and download contents via Forefront TMG

Article:TECH210015  |  Created: 2013-08-27  |  Updated: 2014-03-06  |  Article URL http://www.symantec.com/docs/TECH210015
Article Type
Technical Solution


Subject

Issue



This article provides information on how to configure Java Liveupdate to authenticate and download contents via Forefront TMG


Cause



 Java Liveupdate only supports "Basic" authentication method defined in Forefront TMG.


Solution



In order to configure Java Liveupdate to authenticate and download contents via Forefront TMG, "Basic" Authentication method must be enabled at the proxy level.

1) Enable "Basic Authentication" in Forefront TMG

Below is a screenshot taken from the Forefront TMG Management Console showing the location where to enable Basic Authentication:

 

2) Edit the Java Liveupdate configuration file using Config Editor

Pre-requisistes:

a) Ensure that the latest Java Runtime Environment is installed on the same computer running Java LiveUpdate

b) Ensure that the "java" command path is added to the default PATH environment variable.

c) Ensure that the latest JCE policy files are installed on the system (more info: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html) 

 

From a command prompt, browse to the Java Liveupdate "jar" folder, by default located in the following folders:

(x86)   "C:\Program Files (x86)\Common Files\Symantec Shared\Java Liveupdate"

(x64)   "C:\Program Files\Common Files\Symantec Shared\Java Liveupdate"

Then run the following command (case sensitive!):       java -cp jlu.jar ConfigEditor

 

In the Config Editor window, enter the following information related to the Forefront TMG configuration:

Name:  proxy
Value:  <proxy_address>:<port>

Name: proxyusername
Value: <username>

Name: proxypassword
Value: <password>

Then select the "Encrypt" checkbox and click "Save".


IMPORTANT! Scan Engine 5.2.x or Protection Engine users:
 
Once the file is saved, it must be manually copied (and replaced) to the Scan Engine binaries folder. By default it's located in C:\Program Files\Symantec\Scan Engine.

For more information, please refer to the articles listed in the Related Articles section of this page.

 

Example of Java Liveupdate log file when downloading content via a TMG proxy server: 

Aug 27, 2013 7:12:13 AM Java LiveUpdate launched with the command line = -c C:\Program Files (x86)\Symantec\Scan Engine\liveupdate.conf 
  [ -p SPE URLListLookup Definitions for x86-windows -v 7.0 -l SymAllLanguages -t caiclist -z 0 ] 
Aug 27, 2013 7:12:13 AM   SPE URLListLookup Definitions for x86-windows, 7.0, SymAllLanguages, caiclist, 0
Aug 27, 2013 7:12:13 AM Using character set UTF-8
Aug 27, 2013 7:12:13 AM Command-line Product Selections to update:
Aug 27, 2013 7:12:13 AM (ProdName, Version, Lang, ItemSeqName, SeqNum)
Aug 27, 2013 7:12:13 AM   JLU Windows, 3.9.1, English, LiveUpdateSeq, 28
Aug 27, 2013 7:12:14 AM Java Version 1.7.0_09.
Aug 27, 2013 7:12:14 AM Windows Server 2008 R2 6.1
Aug 27, 2013 7:12:14 AM Java LiveUpdate version 3.9.1 Build 28.
Aug 27, 2013 7:12:14 AM ProductInventory: parsed default inventory file: 
  C:\ProgramData\Symantec\Java LiveUpdate\Product.Catalog.JavaLiveUpdate
Aug 27, 2013 7:12:14 AM Inventory File Product Selections to update:
Aug 27, 2013 7:12:14 AM (ProdName, Version, Lang, ItemSeqName, SeqNum)
Aug 27, 2013 7:12:14 AM The property maxZipFileSize in config file is 614,400
Aug 27, 2013 7:12:14 AM The property maxTriFileSize is not set in config file
Aug 27, 2013 7:12:14 AM The property maxTriFileSize in config file changed to 10,485,760
Aug 27, 2013 7:12:14 AM The property maxPackageSize in config file is 734,003,200
Aug 27, 2013 7:12:14 AM The property maxPackageContentSize in config file is 2,147,483,647
Aug 27, 2013 7:12:14 AM Cache is disabled.
Aug 27, 2013 7:12:14 AM Checking to see if JLU can connect to its own listener thread.
Aug 27, 2013 7:12:14 AM Checking to see if a session of JLU is running at port 50032.
Aug 27, 2013 7:12:14 AM An active JLU session has been detected.
Aug 27, 2013 7:12:14 AM JLU was able to successfully connect to its own listener thread.
Aug 27, 2013 7:12:14 AM Downloading minitri.flg to C:\Users\Administrator\Desktop\JLU\1377601934242\minitri.flg ...
Aug 27, 2013 7:12:14 AM Attempting to first connect to the host without using proxy authentication.
Aug 27, 2013 7:12:14 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:12:14 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:12:14 AM Waiting for response ...
Aug 27, 2013 7:12:44 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:12:44 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:12:44 AM Waiting for response ...
Aug 27, 2013 7:12:44 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:12:44 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:12:44 AM Waiting for response ...
Aug 27, 2013 7:12:44 AM Receiving file ...
Aug 27, 2013 7:12:44 AM Transfer completed in 344 ms (1,101 bytes/sec)
Aug 27, 2013 7:12:44 AM Downloading spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip to 
  C:\Users\Administrator\Desktop\JLU\1377601934242\spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip ...
Aug 27, 2013 7:12:44 AM Attempting to first connect to the host without using proxy authentication.
Aug 27, 2013 7:12:44 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:12:44 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:12:44 AM Waiting for response ...
Aug 27, 2013 7:13:14 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:13:14 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:13:14 AM Waiting for response ...
Aug 27, 2013 7:13:14 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:13:14 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:13:14 AM Waiting for response ...
Aug 27, 2013 7:13:15 AM Receiving file ...
Aug 27, 2013 7:13:15 AM Transfer completed in 281 ms (12,217 bytes/sec)
Aug 27, 2013 7:13:15 AM Downloading jlu$20windows_3.9.1_english_livetri.zip to 
  C:\Users\Administrator\Desktop\JLU\1377601934242\jlu$20windows_3.9.1_english_livetri.zip ...
Aug 27, 2013 7:13:15 AM Attempting to first connect to the host without using proxy authentication.
Aug 27, 2013 7:13:15 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:13:15 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:13:15 AM Waiting for response ...
Aug 27, 2013 7:13:45 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:13:45 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:13:45 AM Waiting for response ...
Aug 27, 2013 7:13:45 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:13:45 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:13:45 AM Waiting for response ...
Aug 27, 2013 7:13:45 AM The zip entry is liveupdt.tri
Aug 27, 2013 7:13:45 AM The zip entry is liveupdt.grd
Aug 27, 2013 7:13:45 AM The zip entry is liveupdt.sig
Aug 27, 2013 7:13:45 AM Unzipping spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip into 
  C:\Users\Administrator\Desktop\JLU\1377601934242\spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip1377602025518 ...
Aug 27, 2013 7:13:45 AM The zip file downloaded is a catalog file
Aug 27, 2013 7:13:45 AM Extracting liveupdt.tri
Aug 27, 2013 7:13:45 AM Total number of bytes read is 1,334
Aug 27, 2013 7:13:45 AM Extracting liveupdt.grd
Aug 27, 2013 7:13:45 AM Total number of bytes read is 483
Aug 27, 2013 7:13:45 AM Extracting liveupdt.sig
Aug 27, 2013 7:13:45 AM Total number of bytes read is 2,609
Aug 27, 2013 7:13:45 AM Unzipping completed
Aug 27, 2013 7:13:45 AM Loading root certificate
Aug 27, 2013 7:13:45 AM Setting certificate restrictions
Aug 27, 2013 7:13:45 AM Loading guard file:  C:\Users\Administrator\Desktop\JLU\1377601934242\spe$20urllistlookup$20definitions$20for$20x86$2dwindows_7.0_symalllanguages_livetri.zip1377602025518\liveupdt.grd
Aug 27, 2013 7:13:45 AM Precondtion evaluation succeeded for expression .
Aug 27, 2013 7:13:45 AM For input string: "". UIPriv value is not valid. 
Aug 27, 2013 7:13:45 AM Downloading 1377544368jtun_caiclist1.x86 to C:\Users\Administrator\Desktop\JLU\1377601934242\1377544368jtun_caiclist1.x86 ...
Aug 27, 2013 7:13:45 AM Attempting to first connect to the host without using proxy authentication.
Aug 27, 2013 7:13:45 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:13:45 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:13:45 AM Waiting for response ...
Aug 27, 2013 7:14:15 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:14:15 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:14:15 AM Waiting for response ...
Aug 27, 2013 7:14:15 AM Connecting to HTTP proxy 192.168.11.100:8080 ...
Aug 27, 2013 7:14:15 AM Connected to 192.168.11.100:8080 sending request ...
Aug 27, 2013 7:14:15 AM Waiting for response ...
Aug 27, 2013 7:14:15 AM Receiving file ...
Aug 27, 2013 7:14:15 AM Transfer completed in 218 ms (85,711 bytes/sec)
Aug 27, 2013 7:14:15 AM Checking authenticity of package C:\Users\Administrator\Desktop\JLU\1377601934242\1377544368jtun_caiclist1.x86
Aug 27, 2013 7:14:15 AM The zip entry is caiclist
Aug 27, 2013 7:14:15 AM The zip entry is cfcurlclist
Aug 27, 2013 7:14:15 AM The zip entry is urldefupdtr.ini
Aug 27, 2013 7:14:15 AM The zip entry is urldefupdtr.jar
Aug 27, 2013 7:14:15 AM Unzipping 1377544368jtun_caiclist1.x86 into C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985 ...
Aug 27, 2013 7:14:15 AM Extracting caiclist
Aug 27, 2013 7:14:15 AM Total number of bytes read is 53,333
Aug 27, 2013 7:14:15 AM Extracting cfcurlclist
Aug 27, 2013 7:14:15 AM Total number of bytes read is 158
Aug 27, 2013 7:14:15 AM Extracting urldefupdtr.ini
Aug 27, 2013 7:14:15 AM Total number of bytes read is 292
Aug 27, 2013 7:14:15 AM Extracting urldefupdtr.jar
Aug 27, 2013 7:14:16 AM Total number of bytes read is 3,686
Aug 27, 2013 7:14:16 AM Unzipping completed
Aug 27, 2013 7:14:16 AM Adding C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985\urldefupdtr.jar to the class path.
Aug 27, 2013 7:14:16 AM Loaded urldefupdater.URLDefInstaller from C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985\urldefupdtr.jar
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Update Description: Copying files....
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Source directory: C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Destination directory: C:\Program Files (x86)\Symantec\Scan Engine\definitions\URLListLookup\tmpIncomingcaic
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: JLU version: 2.1.7
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: pkgDir: C:\Users\Administrator\Desktop\JLU\1377601934242\1377602055985
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Update Description: Deleting temp files...
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Delete file: urldefupdtr.jar
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Delete file: urldefupdtr.ini
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Create file: C:\Program Files (x86)\Symantec\Scan Engine\definitions\URLListLookup\tmpIncomingcaic\defdownloaddir.ini
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Update Description: done
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Number of files copied: 4
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Number of files temporary deleted: 2
Aug 27, 2013 7:14:16 AM urldefupdater.URLDefInstaller: Number of files copied net: 2
Aug 27, 2013 7:14:16 AM 
Aug 27, 2013 7:14:16 AM The Java LiveUpdate session has completed successfully.
Aug 27, 2013 7:14:16 AM Return code = 0
Aug 27, 2013 7:14:16 AM 




Article URL http://www.symantec.com/docs/TECH210015


Terms of use for this information are found in Legal Notices