JDK-8247707 : UAC prompt of unknown publisher after upgrading java 8u241
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 8u241
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2020-06-16
  • Updated: 2021-04-14
  • Resolved: 2021-03-04
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
Related Reports
Relates :  
Application shows UAC prompt with Unknown Publisher after upgrading JDK from 8u202 to 8u241.

Java 8u202 is installed on the Windows 2016 servers and is working without an issue.

Below message is popped up on the screen.
         User Account Control
         Do you want to allow this app from an unknown publisher to make changes to your device?
         Unknown program
         Publisher: Unknown
         File origin: Downloaded from the Internet
Root Cause: An application uses Family Static Version {CAFEEFAC-0018-0000-FFFF-ABCDEFFEDCBA}. The app is started by non-admin user. It is a virtualised environment. When the server is restarted, all the changes to the configuration are wiped out and the server returns to its base image. The base image has 8u202 installed. If administrator uninstalls 8u202 and installs a newer version, let it be 8u271, the registry in HKCU of the test user becomes inconsistent: the Java Plugin entries which existed with 8u202 are brought back and point to the 8u202 installation. The registry looks like this: {CAFEEFAC-0018-0000-0271-ABCDEFFEDCBA} ��� 8u271 {CAFEEFAC-0018-0000-FFFF-ABCDEFFEDCBA} ��� 8u202 The SSV Helper Object checks only -0271- key which exists and correctly points to 8u271, thus no update is required. But -FFFF- key points to the DLL that does not exist on the system any more. In this particular environment, Internet Explorer tries to re-install the missing ActiveX control which is Java Plugin in this case; UAC prompt is displayed.