Security of SerializedSystemIni

The instructions I've seen to create a new domain typically
include copying an existing fileRealm.properties and
SerializedSystemIni.dat. Is this secure? It looks like the
SerializedSystemIni file contains a 4 byte salt and a 32 byte
key. So, if the ini file is copied, each domain will have the
same private key (inside the weblogic server code, the key
in the ini file is read into fields labeled
"encryptedSecretKey"). Can anyone confirm how the
SerializedSystemIni file is used? Thanks.

This is a known issue.
Bug 19766239 - WLS 12.1.3 - MS NOT STARTING - 'DOWNLOAD OF THIS FILE IS NOT ALLOWED'
Issue is fixed in WLS 12.1.4 or applying following patch in previous versions:
Downlaod from : https://updates.oracle.com/download/19730967.html
Add this flag in both Admin and managed server startup script :
-Dweblogic.data.canTransferAnyFile=true
-- Puneeth

Similar Messages

Weblogic.security.internal.SerializedSystemIniException

While starting weblogic server, I am getting the following error,
Exception raised:
weblogic.security.internal.SerializedSystemIniException: Version mismatch. have
0, expected 1
     at weblogic.security.internal.SerializedSystemIni.<init>(SerializedSystemIni.java:119)
     at weblogic.security.internal.SerializedSystemIni.getEncryptionService(SerializedSystemIni.java:208)
     at weblogic.management.internal.EncryptedData.getEncryptionService(EncryptedData.java:82)
Can anybody give a clue in this to resolve urgently?

It seems like your SerializedSystemIni.dat is currupted.
Do you have SerializedSystemIni.dat and fileRealm.property from any other
working domain?
Please try to replace both of them and see if this fixes the problem.
-utpal
"Ramanan " <[email protected]> wrote in message
news:[email protected]..
>
While starting weblogic server, I am getting the following error,
Exception raised:
weblogic.security.internal.SerializedSystemIniException: Version mismatch.have
0, expected 1
atweblogic.security.internal.SerializedSystemIni.<init>(SerializedSystemIni.ja
va:119)
atweblogic.security.internal.SerializedSystemIni.getEncryptionService(Serializ
edSystemIni.java:208)
atweblogic.management.internal.EncryptedData.getEncryptionService(EncryptedDat
a.java:82)
>
Can anybody give a clue in this to resolve urgently?

MBean creation: Encrypted = "true" doesnt work in MBeanAttribute

Hello!
I'm trying to create a custom AuthenticationProvider for WLS7 (up to
date with service packs) and use the
weblogic.management.commo.WebLogicMBeanMaker to create the necessary
stubs. The authanticator should remember the system user and its
password, so I created the following two <MBeanAttribute>s for the
MBeanType:
<MBeanAttribute Name="SystemUser" Type="java.lang.String"
Writeable="true" Default=""system"" CachingDisabled="false"
CurrencyTimeLimit="-1" Deprecated="false"
GenerateExtendedAccessors="false" IsIs="false" Iterable="false"
LegalNull="true" Listen="false" Log="false" NoDoc="false"
NoDump="false" Readable="true" Visibility="1" />
<MBeanAttribute Name="SystemPassword" Type="java.lang.String"
Writeable="true" Default=""password"" Encrypted="true"
CachingDisabled="false" CurrencyTimeLimit="-1" Deprecated="false"
GenerateExtendedAccessors="false" IsIs="false" Iterable="false"
LegalNull="true" Listen="false" Log="false" NoDoc="false"
NoDump="false" Readable="true" Visibility="1" />
It works fine as long as I leave out Encrypted="true" in the
SystemPassword, but if I do this, I can find the password hanging
around in cleartext in the /domain/userConfig/Security-folders. If I
use Encrypted="true" it compiles fine, the server starts up fine, I
can configure it without a problem. But as soon as I set the password
in the admin-console and restart the server I get the following
Exception:
<07.06.2003 18:49:51 CEST> <Critical> <WebLogicServer> <000364>
<Server failed during initialization.
Exception:weblogic.management.configuration.ConfigurationException: -
with nested exception:
[java.lang.NullPointerException]
java.lang.NullPointerException
at weblogic.security.internal.SerializedSystemIni.getEncryptionService(SerializedSystemIni.java:225)
at weblogic.management.commo.CommoModelMBean.getAttribute(CommoModelMBean.java:319)
at javax.management.modelmbean.RequiredModelMBean.setAttribute(RequiredModelMBean.java:1681)
at weblogic.management.commo.CommoModelMBean.setAttribute(CommoModelMBean.java:136)
at weblogic.management.commo.CommoModelMBean.load(CommoModelMBean.java:616)
at weblogic.management.commo.Commo.initInstances(Commo.java:241)
at weblogic.management.commo.Commo.init(Commo.java:125)
at weblogic.management.AdminServerAdmin.initializeCommo(AdminServerAdmin.java:477)
at weblogic.management.AdminServerAdmin.initialize(AdminServerAdmin.java:108)
at weblogic.t3.srvr.T3Srvr.initialize1(T3Srvr.java:664)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:594)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:282)
at weblogic.Server.main(Server.java:32)
--------------- nested within: ------------------
weblogic.management.configuration.ConfigurationException: - with
nested exception:
[java.lang.NullPointerException]
at weblogic.management.AdminServerAdmin.initializeCommo(AdminServerAdmin.java:486)
at weblogic.management.AdminServerAdmin.initialize(AdminServerAdmin.java:108)
at weblogic.t3.srvr.T3Srvr.initialize1(T3Srvr.java:664)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:594)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:282)
at weblogic.Server.main(Server.java:32)
>
Any ideas what could be wrong? What kind of encryption service does it
look for?
Thanks for any idea that could be useful.
Regards
Thomas

This is a known issue. Contact [email protected] for a patch.
Satya wrote:
This indeed looks like a bug, please enter a case with support.
Thanks,
-satya
Thomas wrote:
Hello!
I'm trying to create a custom AuthenticationProvider for WLS7 (up to
date with service packs) and use the
weblogic.management.commo.WebLogicMBeanMaker to create the necessary
stubs. The authanticator should remember the system user and its
password, so I created the following two <MBeanAttribute>s for the
MBeanType:
<MBeanAttribute Name="SystemUser" Type="java.lang.String"
Writeable="true" Default=""system"" CachingDisabled="false"
CurrencyTimeLimit="-1" Deprecated="false"
GenerateExtendedAccessors="false" IsIs="false" Iterable="false"
LegalNull="true" Listen="false" Log="false" NoDoc="false"
NoDump="false" Readable="true" Visibility="1" />
<MBeanAttribute Name="SystemPassword" Type="java.lang.String"
Writeable="true" Default=""password"" Encrypted="true"
CachingDisabled="false" CurrencyTimeLimit="-1" Deprecated="false"
GenerateExtendedAccessors="false" IsIs="false" Iterable="false"
LegalNull="true" Listen="false" Log="false" NoDoc="false"
NoDump="false" Readable="true" Visibility="1" />
It works fine as long as I leave out Encrypted="true" in the
SystemPassword, but if I do this, I can find the password hanging
around in cleartext in the /domain/userConfig/Security-folders. If I
use Encrypted="true" it compiles fine, the server starts up fine, I
can configure it without a problem. But as soon as I set the password
in the admin-console and restart the server I get the following
Exception:
<07.06.2003 18:49:51 CEST> <Critical> <WebLogicServer> <000364>
<Server failed during initialization.
Exception:weblogic.management.configuration.ConfigurationException: -
with nested exception:
[java.lang.NullPointerException]
java.lang.NullPointerException
at
weblogic.security.internal.SerializedSystemIni.getEncryptionService(SerializedSystemIni.java:225)
at
weblogic.management.commo.CommoModelMBean.getAttribute(CommoModelMBean.java:319)
at
javax.management.modelmbean.RequiredModelMBean.setAttribute(RequiredModelMBean.java:1681)
at
weblogic.management.commo.CommoModelMBean.setAttribute(CommoModelMBean.java:136)
at
weblogic.management.commo.CommoModelMBean.load(CommoModelMBean.java:616)
at weblogic.management.commo.Commo.initInstances(Commo.java:241)
at weblogic.management.commo.Commo.init(Commo.java:125)
at
weblogic.management.AdminServerAdmin.initializeCommo(AdminServerAdmin.java:477)
at
weblogic.management.AdminServerAdmin.initialize(AdminServerAdmin.java:108)
at weblogic.t3.srvr.T3Srvr.initialize1(T3Srvr.java:664)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:594)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:282)
at weblogic.Server.main(Server.java:32)
--------------- nested within: ------------------
weblogic.management.configuration.ConfigurationException: - with
nested exception:
[java.lang.NullPointerException]
at
weblogic.management.AdminServerAdmin.initializeCommo(AdminServerAdmin.java:486)
at
weblogic.management.AdminServerAdmin.initialize(AdminServerAdmin.java:108)
at weblogic.t3.srvr.T3Srvr.initialize1(T3Srvr.java:664)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:594)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:282)
at weblogic.Server.main(Server.java:32)
Any ideas what could be wrong? What kind of encryption service does it
look for?
Thanks for any idea that could be useful.
Regards
Thomas
Rajesh Mirchandani
Developer Relations Engineer
BEA Support

Oracle BPEL is not starting up for Weblogic 8.1.5

I have installed Weblogic 8.1.5 and Oracle BPEL for Weblogic in D:. When I tried to start the Oracle WL BPEL, I get the following exception.
<Dec 21, 2005 11:48:05 AM IST> <Notice> <Management> <BEA-140005> <Loading domain configuration from configuration repository at D:\OraBPELPM_2\user_projects\wlorabpel\.\config.xml.>
<Dec 21, 2005 11:48:06 AM IST> <Error> <Management> <BEA-140002> <InvocationTargetException occurred while setting attribute Properties on MBean wlorabpel:Name=BPELServerPool,Type=JDBCConnectionPool to value {user=system, password=manager}. Method: public void weblogic.management.mbeans.custom.JDBCConnectionPool.setProperties(java.util.Properties) throws javax.management.InvalidAttributeValueExcep
tion.
weblogic.security.internal.encryption.EncryptionServiceException: [Security:0902
19]Error decrypting Secret Key java.lang.SecurityException: sealing violation: p
ackage com.rsa.jsafe is sealed
at weblogic.security.internal.encryption.JSafeSecretKeyEncryptor.decrypt
SecretKey(JSafeSecretKeyEncryptor.java:120)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.<ini
t>(JSafeEncryptionServiceImpl.java:205)
at weblogic.security.internal.encryption.JSafeEncryptionServiceFactory.g
etEncryptionService(JSafeEncryptionServiceFactory.java:23)
at weblogic.security.internal.SerializedSystemIni.getEncryptionService(S
erializedSystemIni.java:230)
at weblogic.security.internal.SerializedSystemIni.getEncryptionService(S
erializedSystemIni.java:238)
at weblogic.management.EncryptionHelper.getCEncryptionService(EncryptionHelper.java:141)
at weblogic.management.EncryptionHelper.encryptString(EncryptionHelper.j
ava:81)
at weblogic.management.mbeans.custom.JDBCConnectionPool.setProperties(JD
BCConnectionPool.java:50)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at weblogic.management.internal.DynamicMBeanImpl.invokeSetter(DynamicMBe
anImpl.java:1662)
at weblogic.management.internal.DynamicMBeanImpl.setAttribute(DynamicMBe
anImpl.java:1109)
at weblogic.management.internal.ConfigurationMBeanImpl.setAttribute(Conf
igurationMBeanImpl.java:369)
at com.sun.management.jmx.MBeanServerImpl.setAttribute(MBeanServerImpl.j
ava:1358)
at com.sun.management.jmx.MBeanServerImpl.setAttribute(MBeanServerImpl.j
ava:1333)
at weblogic.management.internal.RemoteMBeanServerImpl.private_setAttribu
te(RemoteMBeanServerImpl.java:431)
at weblogic.management.internal.RemoteMBeanServerImpl.setAttribute(Remot
eMBeanServerImpl.java:387)
at weblogic.management.internal.WLSParserHandler.parseMBeanAttributes(WL
SParserHandler.java:1189)
at weblogic.management.internal.WLSParserHandler.startElement(WLSParserH
andler.java:469)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.processE
lements(ConfigurationRepositoryImpl.java:1059)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.processE
lements(ConfigurationRepositoryImpl.java:1066)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.parseThr
ough(ConfigurationRepositoryImpl.java:468)
at weblogic.management.AdminServerAdmin.parse(AdminServerAdmin.java:733)
at weblogic.management.AdminServerAdmin.initializeRepository(AdminServer
Admin.java:865)
at weblogic.management.AdminServerAdmin.initialize(AdminServerAdmin.java
:267)
at weblogic.t3.srvr.T3Srvr.initializeHere(T3Srvr.java:770)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:669)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:343)
at weblogic.Server.main(Server.java:32)
>
The WebLogic Server did not start up properly.
Exception raised: 'weblogic.management.configuration.ConfigurationException: [Se
curity:090219]Error decrypting Secret Key java.lang.SecurityException: sealing v
iolation: package com.rsa.jsafe is sealed - with nested exception:
[weblogic.security.internal.encryption.EncryptionServiceException: [Security:090
219]Error decrypting Secret Key java.lang.SecurityException: sealing violation:
package com.rsa.jsafe is sealed]'
Reason: weblogic.management.configuration.ConfigurationException: [Security:0902
19]Error decrypting Secret Key java.lang.SecurityException: sealing violation: p
ackage com.rsa.jsafe is sealed - with nested exception:
[weblogic.security.internal.encryption.EncryptionServiceException: [Security:090
219]Error decrypting Secret Key java.lang.SecurityException: sealing violation:
package com.rsa.jsafe is sealed]
D:\OraBPELPM_2\user_projects\wlorabpel>ENDLOCAL
D:\OraBPELPM_2\user_projects\wlorabpel>ENDLOCAL
D:\OraBPELPM_2\user_projects\wlorabpel>
Does anybody know why this exception is coming or Is the oracle bpel different for Weblogic 8.1.5 ?

Can you use WebLogic 8.1 SP4 ? BPEL has been certified with that version. We have been able to reproduce the issue and currently investigating the cause of it.

Error while starting BPEL

Hi All,
I have successfully installed the Oracle BPEL Process Manager with the BEA WebLogic Server 10.
But during startup of the oracleBPELServer server from weblogic console I get the following exception!
So I included the jsafeFIPS.jar in "server start" of the server configuration. but again I get the following error
I think com.rsa.jsafe.ao is depended on some other jar file, please let me know what are other jar files or some other fix for it
<May 26, 2008 5:29:26 PM CDT> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: java.lang.NoClassDefFoundError: com/rsa/jsafe/ao
java.lang.NoClassDefFoundError: com/rsa/jsafe/ao
     at weblogic.security.internal.encryption.JSafeSecretKeyEncryptor.decryptSecretKey(JSafeSecretKeyEncryptor.java:90)
     at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.<init>(JSafeEncryptionServiceImpl.java:206)
     at weblogic.security.internal.encryption.JSafeEncryptionServiceFactory.getEncryptionService(JSafeEncryptionServiceFactory.java:23)
     at weblogic.security.internal.SerializedSystemIni.getEncryptionService(SerializedSystemIni.java:214)
     at weblogic.security.internal.SerializedSystemIni.getEncryptionService(SerializedSystemIni.java:261)
     at weblogic.security.internal.BootProperties.initialize(BootProperties.java:516)
     at weblogic.security.internal.BootProperties.<init>(BootProperties.java:442)
     at weblogic.security.internal.BootProperties.load(BootProperties.java:214)
     at weblogic.security.internal.ServerAuthenticate.main(ServerAuthenticate.java:87)
     at weblogic.management.provider.PropertyService.initializeSecurityProperties(PropertyService.java:249)
     at weblogic.management.provider.internal.RuntimeAccessService.start(RuntimeAccessService.java:42)
     at weblogic.t3.srvr.ServerServicesManager.startService(ServerServicesManager.java:378)
     at weblogic.t3.srvr.ServerServicesManager.startInStandbyState(ServerServicesManager.java:125)
     at weblogic.t3.srvr.T3Srvr.initializeStandby(T3Srvr.java:647)
     at weblogic.t3.srvr.T3Srvr.startup(T3Srvr.java:419)
     at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:377)
     at weblogic.Server.main(Server.java:67)
>
<May 26, 2008 5:29:26 PM CDT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>

Hi Mayank,
Are you working on Oracle SOA, if you are new go with the standard install,
Win XP OS.
Oracle XE Database
Weblogic server
Oracle SOA Suite 11G
Jdeveloper
you can download this from Oracle website and check plenty of samples to learn it.
-Yatan

Unable to start BPEL server - sealing violation

Hi ,
Im trying to run BPEL with Weblogic server.I find i got some security related violations called Sealing Violations .If anyone knows how to fix it and make it run that will be great !
Thanks,
Vinodh
the exception code shown below
<Dec 19, 2005 3:40:12 PM EST> <Error> <Management> <BEA-140002> <InvocationTarge
tException occurred while setting attribute Properties on MBean myorabpel:Name=B
PELServerPool,Type=JDBCConnectionPool to value {user=system, password=manager}.
Method: public void weblogic.management.mbeans.custom.JDBCConnectionPool.setProp
erties(java.util.Properties) throws javax.management.InvalidAttributeValueExcept
ion.
weblogic.security.internal.encryption.EncryptionServiceException: [Security:0902
19]Error decrypting Secret Key java.lang.SecurityException: sealing violation: p
ackage com.rsa.jsafe is sealed
at weblogic.security.internal.encryption.JSafeSecretKeyEncryptor.decrypt
SecretKey(JSafeSecretKeyEncryptor.java:120)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.<ini
t>(JSafeEncryptionServiceImpl.java:205)
at weblogic.security.internal.encryption.JSafeEncryptionServiceFactory.g
etEncryptionService(JSafeEncryptionServiceFactory.java:23)
at weblogic.security.internal.SerializedSystemIni.getEncryptionService(S
erializedSystemIni.java:230)
at weblogic.security.internal.SerializedSystemIni.getEncryptionService(S
erializedSystemIni.java:238)
at weblogic.management.EncryptionHelper.getCEncryptionService(Encryption
Helper.java:141)
at weblogic.management.EncryptionHelper.encryptString(EncryptionHelper.j
ava:81)
at weblogic.management.mbeans.custom.JDBCConnectionPool.setProperties(JD
BCConnectionPool.java:50)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at weblogic.management.internal.DynamicMBeanImpl.invokeSetter(DynamicMBe
anImpl.java:1662)
at weblogic.management.internal.DynamicMBeanImpl.setAttribute(DynamicMBe
anImpl.java:1109)
at weblogic.management.internal.ConfigurationMBeanImpl.setAttribute(Conf
igurationMBeanImpl.java:369)
at com.sun.management.jmx.MBeanServerImpl.setAttribute(MBeanServerImpl.j
ava:1358)
at com.sun.management.jmx.MBeanServerImpl.setAttribute(MBeanServerImpl.j
ava:1333)
at weblogic.management.internal.RemoteMBeanServerImpl.private_setAttribu
te(RemoteMBeanServerImpl.java:431)
at weblogic.management.internal.RemoteMBeanServerImpl.setAttribute(Remot
eMBeanServerImpl.java:387)
at weblogic.management.internal.WLSParserHandler.parseMBeanAttributes(WL
SParserHandler.java:1189)
at weblogic.management.internal.WLSParserHandler.startElement(WLSParserH
andler.java:469)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.processE
lements(ConfigurationRepositoryImpl.java:1059)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.processE
lements(ConfigurationRepositoryImpl.java:1066)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.parseThr
ough(ConfigurationRepositoryImpl.java:468)
at weblogic.management.AdminServerAdmin.parse(AdminServerAdmin.java:733)
at weblogic.management.AdminServerAdmin.initializeRepository(AdminServer
Admin.java:865)
at weblogic.management.AdminServerAdmin.initialize(AdminServerAdmin.java
:267)
at weblogic.t3.srvr.T3Srvr.initializeHere(T3Srvr.java:770)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:669)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:343)
at weblogic.Server.main(Server.java:32)
>
The WebLogic Server did not start up properly.
Exception raised: 'weblogic.management.configuration.ConfigurationException: [Se
curity:090219]Error decrypting Secret Key java.lang.SecurityException: sealing v
iolation: package com.rsa.jsafe is sealed - with nested exception:
[weblogic.security.internal.encryption.EncryptionServiceException: [Security:090
219]Error decrypting Secret Key java.lang.SecurityException: sealing violation:
package com.rsa.jsafe is sealed]'
Reason: weblogic.management.configuration.ConfigurationException: [Security:0902
19]Error decrypting Secret Key java.lang.SecurityException: sealing violation: p
ackage com.rsa.jsafe is sealed - with nested exception:
[weblogic.security.internal.encryption.EncryptionServiceException: [Security:090
219]Error decrypting Secret Key java.lang.SecurityException: sealing violation:
package com.rsa.jsafe is sealed]
***************************************************************************

I found that it is happening only if i try the one with weblogic.If i try with Oracle Server it works i believe.
Any body got this error and know how to or what is the fix?
Thanks,
Vinodh

Sealing violation

Hi ,
Im trying to run BPEL with Weblogic server.I find i got some security related violations called Sealing Violations .If anyone knows how to fix it and make it run that will be great !
Thanks,
Vinodh
the exception code shown below
<Dec 19, 2005 3:40:12 PM EST> <Error> <Management> <BEA-140002> <InvocationTarge
tException occurred while setting attribute Properties on MBean myorabpel:Name=B
PELServerPool,Type=JDBCConnectionPool to value {user=system, password=manager}.
Method: public void weblogic.management.mbeans.custom.JDBCConnectionPool.setProp
erties(java.util.Properties) throws javax.management.InvalidAttributeValueExcept
ion.
weblogic.security.internal.encryption.EncryptionServiceException: [Security:0902
19]Error decrypting Secret Key java.lang.SecurityException: sealing violation: p
ackage com.rsa.jsafe is sealed
at weblogic.security.internal.encryption.JSafeSecretKeyEncryptor.decrypt
SecretKey(JSafeSecretKeyEncryptor.java:120)
at weblogic.security.internal.encryption.JSafeEncryptionServiceImpl.><ini
t>(JSafeEncryptionServiceImpl.java:205)
at weblogic.security.internal.encryption.JSafeEncryptionServiceFactory.g
etEncryptionService(JSafeEncryptionServiceFactory.java:23)
at weblogic.security.internal.SerializedSystemIni.getEncryptionService(S
erializedSystemIni.java:230)
at weblogic.security.internal.SerializedSystemIni.getEncryptionService(S
erializedSystemIni.java:238)
at weblogic.management.EncryptionHelper.getCEncryptionService(Encryption
Helper.java:141)
at weblogic.management.EncryptionHelper.encryptString(EncryptionHelper.j
ava:81)
at weblogic.management.mbeans.custom.JDBCConnectionPool.setProperties(JD
BCConnectionPool.java:50)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at weblogic.management.internal.DynamicMBeanImpl.invokeSetter(DynamicMBe
anImpl.java:1662)
at weblogic.management.internal.DynamicMBeanImpl.setAttribute(DynamicMBe
anImpl.java:1109)
at weblogic.management.internal.ConfigurationMBeanImpl.setAttribute(Conf
igurationMBeanImpl.java:369)
at com.sun.management.jmx.MBeanServerImpl.setAttribute(MBeanServerImpl.j
ava:1358)
at com.sun.management.jmx.MBeanServerImpl.setAttribute(MBeanServerImpl.j
ava:1333)
at weblogic.management.internal.RemoteMBeanServerImpl.private_setAttribu
te(RemoteMBeanServerImpl.java:431)
at weblogic.management.internal.RemoteMBeanServerImpl.setAttribute(Remot
eMBeanServerImpl.java:387)
at weblogic.management.internal.WLSParserHandler.parseMBeanAttributes(WL
SParserHandler.java:1189)
at weblogic.management.internal.WLSParserHandler.startElement(WLSParserH
andler.java:469)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.processE
lements(ConfigurationRepositoryImpl.java:1059)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.processE
lements(ConfigurationRepositoryImpl.java:1066)
at weblogic.management.internal.xml.ConfigurationRepositoryImpl.parseThr
ough(ConfigurationRepositoryImpl.java:468)
at weblogic.management.AdminServerAdmin.parse(AdminServerAdmin.java:733)
at weblogic.management.AdminServerAdmin.initializeRepository(AdminServer
Admin.java:865)
at weblogic.management.AdminServerAdmin.initialize(AdminServerAdmin.java
:267)
at weblogic.t3.srvr.T3Srvr.initializeHere(T3Srvr.java:770)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:669)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:343)
at weblogic.Server.main(Server.java:32)
>
The WebLogic Server did not start up properly.
Exception raised: 'weblogic.management.configuration.ConfigurationException: [Se
curity:090219]Error decrypting Secret Key java.lang.SecurityException: sealing v
iolation: package com.rsa.jsafe is sealed - with nested exception:
[weblogic.security.internal.encryption.EncryptionServiceException: [Security:090
219]Error decrypting Secret Key java.lang.SecurityException: sealing violation:
package com.rsa.jsafe is sealed]'
Reason: weblogic.management.configuration.ConfigurationException: [Security:0902
19]Error decrypting Secret Key java.lang.SecurityException: sealing violation: p
ackage com.rsa.jsafe is sealed - with nested exception:
[weblogic.security.internal.encryption.EncryptionServiceException: [Security:090
219]Error decrypting Secret Key java.lang.SecurityException: sealing violation:
package com.rsa.jsafe is sealed]

You probably have two incompatible-version jar files in action. My guess is jaxp.jar or crimson.jar.
You're compiling against one set, and on deployment running against another.

JRockit JVM Freezes on server start and WLST domain configuration

Hi,
Here is our configuration:
OS:
cat /etc/redhat-release
Red Hat Enterprise Linux Server release 5.3 (Tikanga)
uname -a
Linux ********* 2.6.18-128.el5 #1 SMP Wed Dec 17 11:41:38 EST 2008 x86_64 x86_64 x86_64 GNU/Linux
rpm -qa | grep glibc
glibc-2.5-34
glibc-common-2.5-34
glibc-2.5-34
We are using WLS 10.3 with 64 bit OS and 64 bit JRockit JVM on Xeon system.
The JVM freezes for about 10m when I am trying to start the server. I also see the same behavior when I am trying to create the domain using WLST. Here is the thread dump during the freeze. The JVM eventually recovers from this and continues processing. During domain configuration, the freeze happens when it is trying to write the domain files to disk. All writes are happening to local disk.
===== FULL THREAD DUMP ===============
Mon Apr 20 18:37:41 2009
BEA JRockit(R) R27.6.0-50_o-100423-1.6.0_05-20080626-2104-linux-x86_64
"Main Thread" id=1 idx=0x4 tid=30539 prio=5 alive, in native
at jrockit/io/FileNativeIO.readBytesPinned(Ljava/io/FileDescriptor;[BII)I(Native Method)
    at jrockit/io/FileNativeIO.readBytes(FileNativeIO.java:46)
    at java/io/FileInputStream.readBytes([BII)I(FileInputStream.java)
    at java/io/FileInputStream.read(FileInputStream.java:199)
    at sun/security/provider/NativePRNG$RandomIO.readFully(NativePRNG.java:185)
    at sun/security/provider/NativePRNG$RandomIO.implGenerateSeed(NativePRNG.java:202)
    ^-- Holding lock: java/lang/Object@0x8577948[biased lock]
at sun/security/provider/NativePRNG$RandomIO.access$300(NativePRNG.java:108)
at sun/security/provider/NativePRNG.engineGenerateSeed(NativePRNG.java:102)
at java/security/SecureRandom.generateSeed(SecureRandom.java:495)
at com/bea/security/utils/random/AbstractRandomData.ensureInittedAndSeeded(AbstractRandomData.java:83)
^-- Holding lock: com/bea/security/utils/random/SecureRandomData@0x95f5db0[recursive]
at com/bea/security/utils/random/AbstractRandomData.getRandomBytes(AbstractRandomData.java:97)
^-- Holding lock: com/bea/security/utils/random/SecureRandomData@0x95f5db0[biased lock]
at com/bea/security/utils/random/AbstractRandomData.getRandomBytes(AbstractRandomData.java:92)
at weblogic/security/Salt.getRandomBytes(Salt.java:18)
at weblogic/security/internal/encryption/JSafeSecretKeyEncryptor.decryptSecretKey(JSafeSecretKeyEncryptor.java:108)
at weblogic/security/internal/encryption/JSafeEncryptionServiceImpl.<init>(JSafeEncryptionServiceImpl.java:206)
at weblogic/security/internal/encryption/JSafeEncryptionServiceFactory.getEncryptionService(JSafeEncryptionServiceFactory.java:23)
at weblogic/security/internal/SerializedSystemIni.getEncryptionService(SerializedSystemIni.java:214)
at weblogic/security/internal/SerializedSystemIni.getExistingEncryptionService(SerializedSystemIni.java:240)
at jrockit/vm/RNI.c2java(JJJJJ)V(Native Method)
at jrockit/vm/Reflect.invokeMethod(Ljava/lang/Object;Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;(Native Method)
    at sun/reflect/NativeMethodAccessorImpl.invoke0(Ljava/lang/reflect/Method;Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;(Native Method)
    at sun/reflect/NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun/reflect/DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java/lang/reflect/Method.invoke(Method.java:597)
    at weblogic/descriptor/DescriptorManager$SecurityServiceImpl$SecurityProxy.<init>(DescriptorManager.java:149)
    at weblogic/descriptor/DescriptorManager$SecurityServiceImpl$SecurityProxy.instance(DescriptorManager.java:137)
    at weblogic/descriptor/DescriptorManager$SecurityServiceImpl.isEncrypted(DescriptorManager.java:108)
    at weblogic/descriptor/internal/AbstractDescriptorBean._isEncrypted(AbstractDescriptorBean.java:968)
    at weblogic/management/configuration/SecurityConfigurationMBeanImpl.setCredentialEncrypted(SecurityConfigurationMBeanImpl.java:1557)
    at weblogic/management/configuration/SecurityConfigurationMBeanImpl.setCredentialEncryptedAsString(SecurityConfigurationMBeanImpl.java:781)
    at jrockit/vm/RNI.c2java(JJJJJ)V(Native Method)
    at jrockit/vm/Reflect.invokeMethod(Ljava/lang/Object;Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;(Native Method)
    at sun/reflect/NativeMethodAccessorImpl.invoke0(Ljava/lang/reflect/Method;Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;(Native Method)
    at sun/reflect/NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun/reflect/DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java/lang/reflect/Method.invoke(Method.java:597)
    at com/bea/staxb/runtime/internal/util/ReflectionUtils.invokeMethod(ReflectionUtils.java:48)
    at com/bea/staxb/runtime/internal/RuntimeBindingType$BeanRuntimeProperty.setValue(RuntimeBindingType.java:531)
    at com/bea/staxb/runtime/internal/MultiIntermediary.setValue(MultiIntermediary.java:80)
    at com/bea/staxb/runtime/internal/ByNameRuntimeBindingType$ElementQNameProperty.fill(ByNameRuntimeBindingType.java:348)
    at com/bea/staxb/runtime/internal/LiteralUnmarshalResult.extractAndFillElementProp(LiteralUnmarshalResult.java:139)
    at com/bea/staxb/runtime/internal/ByNameUnmarshaller.deserializeContents(ByNameUnmarshaller.java:51)
    at com/bea/staxb/runtime/internal/AttributeUnmarshaller.unmarshalIntoIntermediary(AttributeUnmarshaller.java:47)
    at com/bea/staxb/runtime/internal/LiteralUnmarshalResult.unmarshalElementProperty(LiteralUnmarshalResult.java:164)
    at com/bea/staxb/runtime/internal/LiteralUnmarshalResult.extractAndFillElementProp(LiteralUnmarshalResult.java:136)
    at com/bea/staxb/runtime/internal/ByNameUnmarshaller.deserializeContents(ByNameUnmarshaller.java:51)
    at com/bea/staxb/runtime/internal/AttributeUnmarshaller.unmarshalIntoIntermediary(AttributeUnmarshaller.java:47)
    at com/bea/staxb/runtime/internal/UnmarshalResult.unmarshalBindingType(UnmarshalResult.java:189)
    at com/bea/staxb/runtime/internal/UnmarshalResult.unmarshalDocument(UnmarshalResult.java:159)
    at com/bea/staxb/runtime/internal/UnmarshallerImpl.unmarshal(UnmarshallerImpl.java:65)
    at weblogic/descriptor/internal/MarshallerFactory$1.createDescriptor(MarshallerFactory.java:95)
    at weblogic/descriptor/BasicDescriptorManager.createDescriptor(BasicDescriptorManager.java:240)
    at weblogic/management/provider/internal/DescriptorManagerHelper.loadDescriptor(DescriptorManagerHelper.java:63)
    at weblogic/management/provider/internal/RuntimeAccessImpl$IOHelperImpl.parseXML(RuntimeAccessImpl.java:683)
    at weblogic/management/provider/internal/RuntimeAccessImpl.parseNewStyleConfig(RuntimeAccessImpl.java:268)
    at weblogic/management/provider/internal/RuntimeAccessImpl.<init>(RuntimeAccessImpl.java:115)
    at weblogic/management/provider/internal/RuntimeAccessService.start(RuntimeAccessService.java:39)
    at weblogic/t3/srvr/ServerServicesManager.startService(ServerServicesManager.java:459)
    at weblogic/t3/srvr/ServerServicesManager.startInStandbyState(ServerServicesManager.java:164)
    ^-- Holding lock: java/lang/Class@0x939df30[biased lock]
at weblogic/t3/srvr/T3Srvr.initializeStandby(T3Srvr.java:711)
at weblogic/t3/srvr/T3Srvr.startup(T3Srvr.java:482)
at weblogic/t3/srvr/T3Srvr.run(T3Srvr.java:440)
at weblogic/Server.main(Server.java:67)
at jrockit/vm/RNI.c2java(JJJJJ)V(Native Method)
-- end of trace
<<Truncated for brevity>>
===== END OF THREAD DUMP ===============
The same process works fine on a VM with the same OS. Any ideas what might be going on?
Thanks,
Chengi

This does not look familiar to me. Download R27.6.3 and see if that works things out: http://www.oracle.com/technology/software/products/jrockit/index.html. If that does not help, I recommend you to report the issue to JRockit support (see how to below).
Best Regards,
Tuva
JRockit PM
How to report to JRockit support:
You must register and file the issue on Metalink, http://metalink.oracle.com. Note that you must have purchased support to continue.
If you have problems during the registration or filing you can call our support +1.800.223.1711* or 1-800-633-0738 directly.
In case you have not purchased support call 1.800.833.3536* for support sales.
More information on our support site: http://www.oracle.com/support/index.html.
*) US numbers - for global technical support contacts see: http://www.oracle.com/support/contact.html

Salted hash

Hi,
I'm using an SQLAuthenticationProvider with SALTEDHASH as for the password style, and SHA-1 as the password algorithm. I'm able to create users and generate passwords. However, I must use an external website to manage user creations. That means I must be sure that the hashed passwords created by the website be equal to those one weblogic would interpret. I managed to obtain the correct generation when salted hash is not used. In this last case I didn't. Somewhere I read that the salt can be read from SerializedSystemIni.dat. I tried but without any results. I also tried to use method weblogic.security.internal.SerializedSystemIni.getSalt. I'm using the following code:
     public static void main(String[] args){
          try {
               MessageDigest sha = MessageDigest.getInstance("SHA1");
               sha.reset();
               sha.update(weblogic.security.internal.SerializedSystemIni.getSalt("D:\\WebLogic\\user_projects\\domains\\plsdomain\\security\\SerializedSystemIni.dat"));
               byte[] hash = sha.digest(data.getBytes());
               System.out.print(Base64.encodeBase64String(hash));
          } catch (NoSuchAlgorithmException e) {
               e.printStackTrace();
Apparently, the password being generated using the salted hash is more than the 160bit expected for SHA-1. I thought the salt is being added to it, but how. It is obvious that it wouldn't make sense to simply add the salt in every password since it is fixed and stored in an external file.
Any help would be very much appreciated.
Thankyou,
- Fra.
Edited by: user8995156 on 7-set-2010 2.20

You need to know the salt value to create the same hash value that Weblogic Creates.
The value of the salt cannot be disclosed due to security reasons.
You will have to look for some other alternative.
-Faisal

FileNotFoundException for SerializedSystemIni.dat & fileRealm.properties

I'm running Weblogic 8.1 SP4 on WIndows 2000 and I keep getting the following errors periodically appearing in my console window. The two files exist in the current directory (the 'mydomain' folder), which is the same place that I run startweblogic.cmd from. How do I fix this?
<pre>
java.io.FileNotFoundException: .\SerializedSystemIni.dat: The system cannot find the file specified
at jrockit.io.FileNativeIO.open0(Ljava.lang.String;I)I(UnknownSource)
at jrockit.io.FileNativeIO.open(Ljava.lang.String;I)Ljava.io.FileDescriptor;(UnknownSource)
at java.io.FileInputStream.<init>(Ljava.lang.String;)V(UnknownSource)
at weblogic.management.internal.AdminMBeanHomeImpl.getDigest(Ljava.lang.String;)[B(AdminMBeanHomeImpl.java:128)
at weblogic.management.internal.AdminMBeanHomeImpl.updateManagedServerMSIFile(Ljava.lang.String;[B)V(AdminMBeanHomeImpl.java:985)
at weblogic.management.internal.SaveDomainTrigger.trigger(Lweblogic.time.common.Schedulable;)V(SaveDomainTrigger.java:78)
at weblogic.time.common.internal.ScheduledTrigger.run()Ljava.lang.Object;(ScheduledTrigger.java:243)
at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(Lweblogic.security.subject.AbstractSubject;Ljava.security.PrivilegedAction;)Ljava.lang.Object;(AuthenticatedSubject.java:321)
at
weblogic.security.service.SecurityManager.runAs(Lweblogic.security.acl.internal.AuthenticatedSubject;Lweblogic.security.acl.internal.AuthenticatedSubject;Ljava.security.PrivilegedAction;)Ljava.lang.Object;(SecurityManager.java:121)
at weblogic.time.common.internal.ScheduledTrigger.executeLocally()V(ScheduledTrigger.java:229)
at weblogic.time.common.internal.ScheduledTrigger.execute(Lweblogic.kernel.ExecuteThread;)V(ScheduledTrigger.java:223)
at weblogic.time.server.ScheduledTrigger.execute(Lweblogic.kernel.ExecuteThread;)V(ScheduledTrigger.java:50)
at weblogic.kernel.ExecuteThread.execute(Lweblogic.kernel.ExecuteRequest;)V(ExecuteThread.java:219)
at weblogic.kernel.ExecuteThread.run()V(ExecuteThread.java:178)
at java.lang.Thread.startThreadFromVM(Ljava.lang.Thread;)V(UnknownSource)
java.io.FileNotFoundException: .\fileRealm.properties: The system cannot find the file specified
at jrockit.io.FileNativeIO.open0(Ljava.lang.String;I)I(UnknownSource)
at jrockit.io.FileNativeIO.open(Ljava.lang.String;I)Ljava.io.FileDescriptor;(UnknownSource)
at java.io.FileInputStream.<init>(Ljava.lang.String;)V(UnknownSource)
at weblogic.management.internal.AdminMBeanHomeImpl.getDigest(Ljava.lang.String;)[B(AdminMBeanHomeImpl.java:128)
at weblogic.management.internal.AdminMBeanHomeImpl.updateManagedServerMSIFile(Ljava.lang.String;[B)V(AdminMBeanHomeImpl.java:993)
at weblogic.management.internal.SaveDomainTrigger.trigger(Lweblogic.time.common.Schedulable;)V(SaveDomainTrigger.java:78)
at weblogic.time.common.internal.ScheduledTrigger.run()Ljava.lang.Object;(ScheduledTrigger.java:243)
at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(Lweblogic.security.subject.AbstractSubject;Ljava.security.PrivilegedAction;)Ljava.lang.Object;(AuthenticatedSubject.java:321)
at
weblogic.security.service.SecurityManager.runAs(Lweblogic.security.acl.internal.AuthenticatedSubject;Lweblogic.security.acl.internal.AuthenticatedSubject;Ljava.security.PrivilegedAction;)Ljava.lang.Object;(SecurityManager.java:121)
at weblogic.time.common.internal.ScheduledTrigger.executeLocally()V(ScheduledTrigger.java:229)
at weblogic.time.common.internal.ScheduledTrigger.execute(Lweblogic.kernel.ExecuteThread;)V(ScheduledTrigger.java:223)
at weblogic.time.server.ScheduledTrigger.execute(Lweblogic.kernel.ExecuteThread;)V(ScheduledTrigger.java:50)
at weblogic.kernel.ExecuteThread.execute(Lweblogic.kernel.ExecuteRequest;)V(ExecuteThread.java:219)
at weblogic.kernel.ExecuteThread.run()V(ExecuteThread.java:178)
at java.lang.Thread.startThreadFromVM(Ljava.lang.Thread;)V(UnknownSource)
</pre>

"Frank" <[email protected]> wrote in message
news:[email protected]..
>
Hi there,
I know in the doc it says that you cannot copy the boot.properties fileamong
different
domains. However I am looking for a solution to achieve exactly this as Iwould
like
to have global settings for the system user for all domains. Is itpossible to
a global
SerializedSystemIni.dat with domains linking to that (and all domainsponting
to one ?
I don't believe you can change the location of the SerializedSystemIni.dat
so it
may be difficult to have the domains point to a common file. You would
probably
have to copy the file around to the appropriate location.

BEA public API (WLS6.1)for programatically updating default security realm?

Hi,
Does anyone know how to use BEA's public API to programmatically add/update WLS
6.1 user credentials in the default security realm? The API would of course
automatically persist the updates to $WLS/config/mydomain/fileRealm.properties.
Is there a way to do such updates by programmatically engaging the WLS security
realm related Mbeans? I basically need to do (from a deployed application component)
what is easily done from the WLS Console's [security->User->Add User/Change
Password] screen. Ideally, I could use the same API that the weblogic.security.acl.internal.FileRealm
command line utility (or wlshell also) uses to make updates. But I doubt that
the classes used by these tools are in BEA's public API for WLS 6.1. Especially
important to me would be the BEA API mechanism that takes a clear-text password
and hashes it to the encrypted format written in fileRealm.properties (and synchronized
w/ SerializedSystemIni.dat). Ultimately, I am trying to replicate a large
Oracle table of (*user, clear-text -password, group) records into the default
WLS security realm. Thanks for any insights.
Ben

Thanks to another's post, I have found the answer to my problem in the Girdley/Woollen/Emerson
book "J2EE Applications and BEA WebLogic Server" pp. 496-498:
Note: this code segment is for WLS 6.1 and this API is said to be deprecated
in WLS 7+
//Roughly outlined, assuming session w/ userName, groupName, password Strings
in HTTP Post request
weblogic.security.acl.CachingRealm realm = (weblogic.security.acl.CachingRealm)
weblogic.security.acl.Security.getRealm();
weblogic.security.acl.User u;
weblogic.security.acl.Group g;
u = realm.newUser(userName, password, null);
g = realm.getGroup(groupName); // use g = realm.newGroup(groupName) if groupName
does not exist in realm
g.addMember(u);
//log in the new user
int rc = weblogic..servlet.security.ServletAuthentication.weak(userName, password,
httpSession);
// use realm.deleteUser(u), realm.deleteGroup(g) as appropriate, etc.
"Ben Cotton" <[email protected]> wrote:
>
>
Hi,
Does anyone know how to use BEA's public API to programmatically add/update
WLS
6.1 user credentials in the default security realm? The API would of
course
automatically persist the updates to $WLS/config/mydomain/fileRealm.properties.
Is there a way to do such updates by programmatically engaging the
WLS security
realm related Mbeans? I basically need to do (from a deployed application
component)
what is easily done from the WLS Console's [security->User->Add User/Change
Password] screen. Ideally, I could use the same API that the weblogic.security.acl.internal.FileRealm
command line utility (or wlshell also) uses to make updates. But I
doubt that
the classes used by these tools are in BEA's public API for WLS 6.1.
Especially
important to me would be the BEA API mechanism that takes a clear-text
password
and hashes it to the encrypted format written in fileRealm.properties
(and synchronized
w/ SerializedSystemIni.dat). Ultimately, I am trying to replicate
a large
Oracle table of (*user, clear-text -password, group) records into the
default
WLS security realm. Thanks for any insights.
Ben

Error while invoking a WS-Security secured web service from Oracle BPEL..

Hi ,
We are facing some error while invoking a WS-Security secured web service from our BPEL Process on the windows platform(SOA 10.1.3.3.0).
For the BPEL process we are following the same steps as given in an AMIS blog : - [http://technology.amis.nl/blog/1607/how-to-call-a-ws-security-secured-web-service-from-oracle-bpel]
but sttill,after deploying it and passing values in it,we are getting the following error on the console :-
“Header [http://schemas.xmlsoap.org/ws/2004/08/addressing:Action] for ultimate recipient is required but not present in the message”
Any pointers in this regard will be highly appreciated.
Thanks,
Saurabh

Hi James,
Thanks for the quick reply.
We've tried to call that web service from an HTML designed in Visual Studios with the same username and password and its working fine.
But on the BPEL console, we are getting the error as mentioned.
Also if you can tell me how to set the user name and password in the header of the parter link.I could not find how to do it.
Thanks,
Saurabh

Malicious or not? Message popped up: Mozilla security found (something like too much, forget exact word) activity on your computer so it will do a fast scan of system file. With OK button.

I was looking at youtube.com, which always tells me my browser is not supported and recommends I download Firefox, but that is what I was using, so I went to Firefox to check for updates. (I think I also had freecycle.org open.) Then this message popped up in a new page: Mozilla security found (something like "too much", forget exact word) activity on your computer so it will do a fast scan of system file. There was an OK button. The page address was: http://update17.stegner.ce.ms/index.php?Q7Lhl9ShbRxGJXpkM1VLSi4ZE8H4pTedoVPySgeppM3VpC+thEspcFG7qxHgn1pdsC2h5ygPGWI3t5hXqMzL9EQaZZ3J1e3CKXgCb0Qp. I did not click OK but copied the link and closed the window which closed the internet. I have never seen this before and would like to know if it is really Mozilla or possibly something malicious. Thank you.

Good catch. That almost certainly is an invitation to download malware.
There are a lot of infected web sites pushing "fake antivirus" software. If you have any doubts about whether your system might have become infected, you can supplement your regular security software with these two highly regarded scanners:
Malwarebytes Anti-malware : http://www.malwarebytes.org/mbam.php
SUPERAntiSpyware : http://www.superantispyware.com/

TS2446 My phone want let me download apps I put the password in then it's say billing options which tell me I have invalid security code

My phone want let me download any apps when I put the password in it take me to billing option which tell me I have the wrong security code and that's the security code that was on the card on the account

iTunes Store: My credit card's security code or zip code does not match my bank's records
http://support.apple.com/kb/TS1646

My iPad wont let me download apps bc security questions, but when I try to make them it freezes

Every time I try to download an app it tells me I need to update my security questions, but once I click to make the questions the box goes white. So I'm not sure how to fix it

The new questions show on your account on http://appleid.apple.com ? If they do then try logging out and back into your account on your phone (assuming that is where you are trying to purchase from) and see if the new questions then show on it.

Security of SerializedSystemIni

Similar Messages

Maybe you are looking for