Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We need to allow a specific java certificate for our users so that they don't have to accept the invalid certificate popup. Is there any known way of doing this? Is there anyway we can deploy a pre-defined JRE certificate store or anything like that?


share|improve this question
I would try this question on SO – Ivo Flipse Sep 29 '09 at 7:12

Managed to find a solution, in <user>\application data\sun\java\deployment\security there's a file called trusted.certs which is the JRE certificate store. You can add and accept the certificates you need and deploy the file to the users through either a GPO or the mandatory profile if you are using mandatory profiles.

share|improve this answer

You need to certify your application using the certificate. This process is called signing, and the java program that does it is jarsigner.exe, explained here. However, this program is part of the java JDK and not the JRE.

Please note that after having signed the jar file, your clients only need the JRE for it to function. You only need install the JDK on the development machine.

For further info see:
Understanding Signing and Verification
Lesson: API and Tools Use for Secure Code and File Exchanges

share|improve this answer
you did not read the question properly. We didn't develop the application, nor will they who properly sign it. It does not matter, I managed to find a solution. – Jonas B Sep 29 '09 at 8:25
Sorry, guess I had answered too many questions by novices the last few days. – harrymc Sep 29 '09 at 8:47
No problem, thanks for the effort anyway :) – Jonas B Sep 29 '09 at 9:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .