Accessing Dell ‘DRAC’ Fails – ‘DRAC5 Console Redirection Client Unable to launch application’

KB ID 0000918

Problem

After I got a new laptop, I attempted to connect to my test server and was greeted with this error.

Application Error
Unable to launch the application

Name: DRAC5 Console Redirection Client
Publisher: Dell Inc
Location: {ip-address}:443

So I hit the details tab and got this,

Error: Missing required Permissions manifest attribute in main jar:
https://{ip-address}:443/plugins/vkvm/avctDRAC5Viewer.jar

Solution

Luckily I had seen a similar error a couple of weeks ago, while a colleague was trying to set up a Cisco ASDM. This is a ‘security feature’ of Java version 7 (Update 51). Work had pre-built my new laptop, so I simply downgraded to Java version 7 Update 45. And it burst into life.

DRAC 5 Java Workaround

Currently Dell consider DRAC5 EOL (End Of Life) and will not fix the certificate issue with updated firmware. Their official response is ‘Maintain an older version of Java’. So either downgrade or lower the security settings;

1. Windows Key + X > Control Panel.

2. Java > Security> Set to Medium.

Related Articles, References, Credits, or External Links

Original article written:19/02/14

Dell DRAC 5 – ‘Error when reading from SSL socket Connection’

Dell DRAC 5 – ‘Error when reading from SSL socket Connection’

KB ID 0001062 

Problem

Ages ago I did an article on how a Java update has stopped me getting access to the DRAC 5 controller on my Power Edge 2950. Well I had more problems this week trying to get on from my MAC.

Solution

The problem is, Java have pretty much blocked communications with SSLv3 (in light of the recent Poodle attack scares). Which is fair enough, but it’s not helping me get on my server that’s 50 miles away! The following procedure allows you to re-enable SSLv3 in Java (Tested on version 8 update 40). Obviously there is some security risks in doing so, this is as SSLv3 is exploitable, so best practice would be to just do this temporarily to get access then disable it again when no longer needed.</p?

1. You need to locate your java.security file, I’ve found paths all over the Internet to its location, the one that matters I found in the following locations;

MAC OSX: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/security/java.security

Windows: C:Program Files (x86)Javajre{version}libsecurityjava.security

Note: If Java/Apple monkey around with paths and you are looking at this in the future execute the following terminal command to find the file;

[box]find / -name ‘java.security‘ -print 2>/dev/null[/box]

2. Once located, edit the file and locate the line that reads;

[box]jdk.tls.disabledAlgorithms=SSLv3[/box]

MAC OSX Java.Security

Windows Java.Security

3. Simply remove SSLv3 from the end of the line and save the file. NOTE: With MAC OSX you will need to SUDO, to have the permissions to edit this file (see below).

Related Articles, References, Credits, or External Links

NA