Wed, 2023-09-27 16:00
Hi, dear community,
in case you notice problems starting ARIS Express caused by certificate problems, this is the consequence of the fact, that we revoked the corresponding certificates.
Software AG was facing a malware attack recently. Thus, for security reasons, we revoked the certificates. As a consequence, the checks for the certificate will fail and Express will not start.
- What versions are affected?
Only the webstart version.
The windows installable version can still be started and installed as well.
- Does that mean, that my data is lost?
No. You just need the windows installation. Maybe using a windows image can help.
- When will be have an updated version of Express?
We cannot give you a date right now.
Sorry, for any inconveniences. But in circumstences like that, you will understand that security is the upmost important issue.
Best regards,
Frank
Frank,
Thanks for the update.
Unfortunately, using the windows installation is not an option for many as it requires a specific port in the company firewall to be open, which is often impossible to achieve. That is why users rely on the webstart version, as it isn't limited by this restriction. So all of them will be unable to use ARIS Express until the issue is resolved.
Ideally, removing the "phone home" functionally would prevent this ever being a problem - maybe you can consider this in future to prevent unnecessary difficulties for users.
Thanks.
Hi Bob,
thank you for you comment, but one thing: the versions themselve do not really differ. Both are "calling home" in order to check the password on the first log in. Only difference is, that the windows version does a check whether there is an update, which is done by webstart itsself. It is definitly not necessary, at least after community account check, to leave some firewall port open.
Bye
Frank
Frank, speaking personally, the Windows version installation does not complete in my corporate environment because when it tries to phone home with the user credentials, it fails as the port to do so is blocked by my firewall - the installation just gets stuck at that screen with the user unable to progress any further. My company refuses to open the required port for security reasons. So ARIS Express can never get installed at work by anyone here (and no doubt elsewhere that has similar restrictions).
The webstart version appears to somehow tunnel the phone home authentication through the firewall without issue. But since it does the check every time it starts, revoking the certificate breaks the application - if this subsequent check was removed, users could continue to use ARIS Express regardless of whether the certificate was valid.
The Windows installation completes correctly when performed on my home PC.
Hi Bob.
ah, I got it. The call is the same. But for the windows version, it uses a mechanism to fetch the proxy. I referes to the system setttings.The webstart version does not use this mechanism, but uses the settings in the JRE settings. They might be different. But again: this is only for the registration. It does NOT do this everytime its starts, neither windows nor webstart. This is only the case if the user.cfg cannot be updated. If you clean this up, it will need to ask again. The windows version only does a call to check for update information.
Hi Frank,
To get ARIS Express back on a Mac, what can I do?
Hi,
I do not know, if there is a way to convince your Mac to start Express anyway, but if the system insists of getting a certificate, nothing. We are right now setting up systems again, and we are getting a new certificate, but I do not have any "estimated time of arrival" right not until build systems are running, in order to get a new version. If you got the possibility, to start a windows image, you should do so.
Bye,
Frank
I've a windows version of ARIS Express downloaded to my laptop and am experiencing the same issue about a revoked certificate. It was revoked on October 9th. What can I do to obtain a new certificate? Please advise. Thanks.
Hello,
I have the same issue on my mac. Can you please update us once the certificat is functioning again?
Kind regards,
Lukas
Hi, we do have the same porblem with the certificate. We are using Windows-PCs in our school.
Please tell us asap when there is a solution.
@all
We are making progress to set up systems and gaining a new certificate again, but currently, I cannot give you a point in time when the updated version will be available.
@Aljoscha Heppner: since you are using windows, there is no need to use the webstart version. You can use the windows installable version.
Bye,
Frank
Thank you for the quick response. Unfortunately i am not the administrator of our school. We cannot install software on the desktop-PCs. Our school is too big to install it everywhere. Anyway, which spezific Version would it be? And where can i download it?
Hi, this is more or less the same version used as the webstart version... download it in the download section in the ARIS community.
You no not need to have administration rights to install it... it can be installed in the user's home.
Gibt es schon eine Lösung für das Problem "Zertifikat entzogen"? Bin auf die Web-Start-Lösung in der Schule angewiesen, da alle Schüler ein MacBook haben. Wäre schön, wenn ich damit im Unterricht weiter arbeiten könnte...
Besten Dank im Voraus.
Hi,
sorry, currently, we cannot give you any estimation, when we can update Express webstart version.
We are currently setting up all systems, and did not set up build system for our non-profit tools yet.
I would really recommend to go for using virtual machines on mac and use the windows version.
Bye,
Frank
Hi!
Do i understand you right, i should install ARIS express?
The students (an i aswell) do not have the rights to install software at the local disk. When i install it to our personal storage in our school-network, i am asked to put in my ARIS Community - user and password. Then it works!
How should the students install the version if they don't have a ARIS Community login?
Grüße aus Bremen, Aljoscha Heppner
Hi,
well, that's the deal. Every user needs to have a community account. We provide the software and this forum for free, so all we request is the community account. But that has nothing to do with the webstart or windows version... this is a general prerequisite.
Bye,
Frank
Hi. For those that really need to install ARIS Express via the webstart version there is a workaround.
In the java console disable the certificate revocation cheks on the advanced settings (not recommended). If like Bob M or myself you only need it for the 1st login because of firewall/proxy issues you can then enable it, delete the app from the java cache and keep only the windows installed version.
Hope this helps.
Ricardo! Thanks for this idea. But how can I get the installation version?
If you used the windows installer it should be on the folder C:\Program Files\ARIS Express\client\lib\
it's the express.jnlp
Hope it helps
Hi guys,
I have a problem with the windows installation version because of this certificate. When I run the locally installed aris application, I experience an issue with not found JRE. Following this thread which explains how to deal with it https://www.ariscommunity.com/users/duezenb/2016-10-25-erros-starting-aris-express-launchercfg I tried to run express.jnlp, but the process cannot be completed because the certificate is invoked.
Please, could you advise what should I do?
Thank you!
hmm - running on Linux - seems like an issue. So I'm saying bye and use yEd ....
Hi,
I'd like to upload the new version earlier, but for security reasons and efforts, we were not able to get our "Go" earlier. This will come soon, so we will update the new version also very soon. Right now, since there's the christmas holiday season, we won't do that, but directly afterwards, this is going to take place.
Bye,
Frank
Hi folks,
this is to inform you, that the webstart version of Express is online again.
I might be necessary to remove the existing webstart version from your JRE. So, go to the java settings (in Windows, you can reach this via the system panel), in the first page go the the temporary internet settings and remove everything. Then, go the the download page for express (Download ARIS Express | ARIS BPM Community (ariscommunity.com)) and click the "download for other systems" (which means, not windows).
Bye,
Frank
Frank, thanks for the notification - all working well now.
Aris Express ist working. What about ARIS Connect? We do have the Portal Version: 98.2.0.1043013?
CertificateRevokedException... What can we do?