Summary

Inventory gathered by the inventory component (ndtrack) does not include details about files named “java.exe” found on Windows computers that are not signed by a trusted certifying authority (CA).

Details

This issue only affects files named “java.exe” on Windows operating systems. Executable files with other names or on other operating systems are not affected.

Versions of java.exe files published Oracle (and earlier by Sun) are typically signed, and so are not normally affected by this issue.

Troubleshooting

Perform the following steps to identify whether a file named “java.exe” that is known to be on a Windows computer but is not appearing in inventory may be affected by this issue:

1. View the properties of the file using Windows Explorer.
2. Click on the Digital Signatures tab in the properties dialog (if that tab is visible), and review the signature details. The file may be affected by this issue if it does not have a trusted and valid signature.

Fix details

Fixed versions of the inventory component now gather basic details of files named “java.exe” found on Windows computers, regardless of whether those files are or are not digitally signed.

Only java.exe executables that are digitally signed will be executed to gather additional details about the Java version that are required for assessing Oracle Java license requirements. File evidence will still be reported for java.exe executables that are not digitally signed, but the executables will not be executed to obtain version information, nor will additional Java verification checks be performed.

Related information

Also see the following article which describes another possible cause for details about files named “java.exe” not being included in inventory:

Known Issue: Details about files named java.exe are not included in inventory gathered from Windows computers unless the PerformOracleJavaAuditScan agent preference is set to TRUE (IOK-1060108)