Support Advisory: Spring Boot JDK Versions >= 9 Affect Cisco Secure Application Start-Up

Summary

Spring Boot with Java Development Kit (JDK) versions >= 9 has issues loading Java Archive (JAR) files when the Security Manager is enabled. Because Cisco Secure Application uses the Java Security Manager, the Spring Boot software issue may prevent class loading, causing application and container start-up failures. See Spring Boot Issue 17796. 

Affected Software

All versions with Cisco Secure Application (Java). 

Workaround

The workarounds below troubleshoot the issue and allows Cisco Secure Application to start-up and run.

• Apply the system property: -Dsun.misc.URLClassPath.disableJarChecking=true to the Java process. 
• Apply the system property: -Dargento.no.security.manager=true to disable the Java Security Manager. 

Resolution

For versions >= 22.12, Cisco Secure Application auto-detects the scenario for the following Spring Boot versions and keeps Java Security Manager disabled: 

• 2.5.0
• 2.4.0 to 2.4.6
• <= 2.3.11 

Cisco AppDynamics is investigating if other versions are affected. We recommended enabling Application Performance Monitoring and Cisco Secure Application monitoring in a staging environment before setting up in a mission-critical environment.

Revision History