Launch KVM Console: Unable to launch the application

[Howard Lum]

I have a UCS C220 M3S with CIMC 1.5(4d). When I try to launch the KVM Console, I get a popup with "Unable to launch the application".

Windows 7

Firefox 33.1

Java Version 8 Update 25

Exception:

com.sun.deploy.net.FailedDownloadException: Unable to load resource: https://10.85.162.187:443/software/avctNuova.jar
    at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
    at com.sun.deploy.net.DownloadEngine.downloadResource(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.javaws.LaunchDownload$DownloadTask.call(Unknown Source)
    at java.util.concurrent.FutureTask.run(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)

Wrapped Exception:

javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
    at sun.security.ssl.Alerts.getSSLException(Unknown Source)
    at sun.security.ssl.Alerts.getSSLException(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.recvAlert(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
    at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection.access$200(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection$9.run(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection$9.run(Unknown Source)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.security.AccessController.doPrivileged(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
    at com.sun.deploy.net.HttpUtils.followRedirects(Unknown Source)
    at com.sun.deploy.net.BasicHttpRequest.doRequest(Unknown Source)
    at com.sun.deploy.net.BasicHttpRequest.doRequest(Unknown Source)
    at com.sun.deploy.net.BasicHttpRequest.doGetRequest(Unknown Source)
    at com.sun.deploy.net.DownloadEngine.actionDownload(Unknown Source)
    at com.sun.deploy.net.DownloadEngine.downloadResource(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.javaws.LaunchDownload$DownloadTask.call(Unknown Source)
    at java.util.concurrent.FutureTask.run(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)

[Keny Perez · Accepted solution]

Downgrade to Java 7 u21 (remove the other Java versions installed) and let us know.

http://www.oracle.com/technetwork/java/javase/downloads/java-archive-downloads-javase7-521261.html

-Kenny

[Howard Lum]

Hi Kenny,

Downgrading to Java 7 u21 fixed my problem. Thanks for your help!

Howard

[Keny Perez]

Glad to help Howard :)

-Kenny

[rtapiawala]

It helped me big time. Had to spend hours to figure it out.

Luckily found your post. Thanks a lot!

[Keny Perez]

I am glad to read that!  You can rate it too, that may help other users to even find it faster :)

-Kenny

[Scott Olsen]

When is it expected for Cisco to have this problem resolved?  Remaining stagnant at obsolete versions of platform software such as Java isn't a tenable position.

"

WARNING: These older versions of the JRE and JDK are provided to help developers debug issues in older systems. They are not updated with the latest security patches and are not recommended for use in production.

"

[Keny Perez]

UCS Mini moved to HTML5 already and regular UCSM is going in the same path to be available soon (I dont have an ETA) however, KVM will still be using Java and that is not a Cisco-only decision, my understanding is that the same protocols that KVM uses are used in other platforms (not only UCS and not only Cisco):

Release 3.0(2c) adds support for the following:

• HTML5 GUI

My 2 cents... maybe someone else would have more information than me on that.

-Kenny

[Scott Olsen]

Thanks for the info!

I can also add that vKVM works with Java 7u80.  Have to create security exceptions for endpoints, or install the Self-Signed cert, or re-cert with valid PKI, etc... etc...

Cheers!

[Suresh Baskaran]

Hi Kenny,

I'm using MAC OS and seeing different error message "Failed to validate certificate. The application will not be executed". This error message is seen in both latest and Java 7 u21 release too.

Exception details shows:

java.lang.RuntimeException: Non-Java exception raised, not handled! (Original problem: Attempt to insert non-property list object {
    "https://172.27.136.185<a29906d2>" =     { }

<snip>

 for key AllowNoPromptSites)
    at com.sun.deploy.security.MacOSXUserTrustRecordList.nativeAddTrustRecord(Native Method)
    at com.sun.deploy.security.MacOSXUserTrustRecordList.addTrustRecord(MacOSXUserTrustRecordList.java:92)
    at com.sun.deploy.security.MacOSXTrustUI.evaluateTrustAfterShow(MacOSXTrustUI.java:230)
    at com.sun.deploy.security.MacOSXTrustUI.evaluateAsTrustedSite(MacOSXTrustUI.java:186)
    at com.sun.deploy.security.MacOSXTrustUI.evaluateTrustAndShow(MacOSXTrustUI.java:156)
    at com.sun.deploy.security.MacOSXTrustUI.showDialog(MacOSXTrustUI.java:79)
    at com.sun.deploy.security.X509Util.showSecurityDialog(X509Util.java:152)
    at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(TrustDecider.java:805)
    at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(AppPolicy.java:295)
    at com.sun.javaws.LaunchDownload.checkSignedResourcesHelper(LaunchDownload.java:1851)
    at com.sun.javaws.LaunchDownload.checkSignedResources(LaunchDownload.java:1527)
    at com.sun.javaws.Launcher.prepareResources(Launcher.java:1283)
    at com.sun.javaws.Launcher.prepareAllResources(Launcher.java:636)
    at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:338)
    at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:238)
    at com.sun.javaws.Launcher.launch(Launcher.java:127)
    at com.sun.javaws.Main.launchApp(Main.java:460)
    at com.sun.javaws.Main.continueInSecureThread(Main.java:292)
    at com.sun.javaws.Main$1.run(Main.java:125)
    at java.lang.Thread.run(Thread.java:695)

Any pointers to launch KVM in my system, would really help. I'm stuck for more than 2 weeks now :-) 

Thanks in advance,

Suresh.

[Toivo Voll]

This. I'm running into this with the SNS ISE security appliance. Having to download an ancient, insecure version of Java, then grant it additional system access on a Mac is the polar opposite of security and completely unacceptable.

[Scott Olsen]

I hear you.

I've resorted to NAT'd Virtual Machines to maintain these 'security tumours' in an attempt to stop metastasis.

[Issa NDIAYE]

Hello

I had same issue; what i do:

firstly, on IE, i install  java 7 U79, secondly, go to  "configure java >Security"  and add an exception to trust cicm ip address (https: 10.5.27.100) for java setting verifications..

Best regards

[Scott Olsen]

Yup.  I now have to maintain a Windows7 VM administratively held at Java7, and configured with these security exceptions to maintain support for some customers.

[sfc9982]

You are Cisco cyber hero!