Oracle Secure Global Desktop (SGD) Users are Prompted with Java Security Warning that Client Archive Signing Certificates have Expired (Doc ID 2338633.1)

Last updated on JUNE 23, 2023

Applies to:

Oracle Secure Global Desktop - Version 4.63 to 5.3 [Release 4.0 to 5.0]
Information in this document applies to any platform.

Symptoms

Users connecting to a legacy Secure Global Desktop (SGD) deployment may receive a Java security warning (or Error) after successful authentication with SGD if the downloaded SGD Client Archives have been signed with an expired signing certificate.

Please see the following document for additional details regarding Secure Global Desktop Java Client Archive signing, as well as a dynamic index of known-expiration dates for SGD releases:

(Doc ID 2328375.1) - Understanding Secure Global Desktop Java Client Archive Signing (Doc ID 2328375.1)

Details regarding expected behavior may vary depending on the version of Java running on the connecting client.

General guidelines, are:

Users that have enabled "Very High" security within Java may be blocked from running the software once the signing certificate has expired.
Users that have enabled "High" security within Java may be blocked from running the software once the time stamping certificate has expired.

Changes

There are no configuration changes in an environment necessary to trigger this behavior other than time: the condition will arise after the signing certificate used to sign the archive has reached the end of its scheduled life.