The latest updated of Java on the client (JRE) is causing problems with SFT – and may prevent files from uploading or downloading properly, or may cause the applet to stop working altogether. If you do not use the applet for uploading or downloading, this problem does not affect you.
A release that addresses the Java issue is now available (Feb 10, 2014). Please email email@example.com to schedule a time to upgrade. For users who are on older version of SFT, and will not be upgrading, disabling the applet is still the best solution.
For customers who are not upgrading: Disable the applet in the Server Configuration page. Senders will see the standard file upload and download options. Please note that there is no reduction in the security of the application by disabling the applet.
Update: February 10, 2014
A new release is now available to address the Java issue – please schedule time with Biscom’s support staff. Send an email to firstname.lastname@example.org.
Update: February 4, 2014
We have completed changes to remove the offending LiveConnect call from all pages that upload or download files. File uploads and downloads have been moved to separate pages. So, for example, when creating an express delivery and after you enter recipients, messages, and other delivery parameters, hitting the Next button will bring you to a page that is solely responsible for uploading your files. You can select files or drag and drop files onto the applet. Similar changes have been made to packages, secure workspaces, and other pages that have file upload or download functionality.
Note that if your users are running an older version of Java (the current version is Java 7 update 51), they will see a warning message from their browser to update Java or simply run the applet without an update. The good news is that file uploads should work for almost all versions of Java.
We expect to have a release ready to provide to customers by the end of the week.
Update: January 20, 2014
We are working on a version of the applet that removes the LiveConnect call. Older versions of Java will be able to run and users will only see dialog boxes recommending they update their Java version. We will post an update when this release becomes available. Our recommendation still is to turn off the applet as described below and wait for this upcoming release.
January 17, 2014
To our SFT customers:
We want to inform you of a potential issue that may affect users of Biscom’s SFT solution. Clients who use the Java applet to upload or download files through SFT may experience problems uploading or downloading files. For example, files uploaded through the applet may appear to upload properly, but the files are not actually uploaded. Other users may see a warning message, or the applet may not work at all.
This problem is occurring now because of recent changes to Java – Java has started to block LiveConnect calls for expired versions of the JRE. As new versions of become available and users upgrade, older JREs are marked as obsolete. This affects the SFT applet that uses the LiveConnect call. The most recent update as of January 14, 2014 is Java 7 update 51. All Java versions prior to update 51 are now expired.
We are working hard on a resolution to this issue now – please bookmark this page as we will provide updates here. We are also filing a formal complaint with Oracle for the changes to Java which have affected us and a large number of other companies who are using Java in their web applications. Please feel free to contact our support team via email at email@example.com or call us at 978-250-8355 if you have any questions.
SFT is now released which will fix the Java issue for clients who have upgraded to the latest Java 7 update 51 version which was released on January 14, 2014. Clients with older versions of Java however will continue to have problems. For this reason, we are recommending our customers to turn off the applet completely.
Steps to turn off the applet:
1. Log into SFT as a System Administrator or root
2. Go to: Home > System and User Administration > Server Configuration
3. Expand Package Settings and set the Allow applet for upload and download to No.
If you have users who require the applet to upload or download very large files (over 2GB), you can enable the applet for only those users or groups of users. In the following example, users that match the pattern *@biscom.com and firstname.lastname@example.org are allowed to use the applet, but all others will only see the standard upload option. You can specify individuals or multiple users with a pattern.
If individual users are experiencing security warnings, these can also be disabled by lowering the security settings in the Java control panel. For users who can access the Java settings in their Control Panel, go to the Security tab and lower the security setting to Medium.
Warning: This change is for users who understand the consequences of changing the security settings. Only recommended for users where this is absolutely necessary and with full knowledge of your network security team.