Profile picture for user Frank Weyand

Hi, dear community,

in case you notice problems starting ARIS Express caused by certificate problems, this is the consequence of the fact, that we revoked the corresponding certificates.

Software AG was facing a malware attack recently. Thus, for security reasons, we revoked the certificates. As a consequence, the checks for the certificate will fail and Express will not start.

  1. What versions are affected?
    Only the webstart version.
    The windows installable version can still be started and installed as well.
     
  2. Does that mean, that my data is lost?
    No. You just need the windows installation. Maybe using a windows image can help.
     
  3. When will be have an updated version of Express?
    We cannot give you a date right now.

Sorry, for any inconveniences. But in circumstences like that, you will understand that security is the upmost important issue.

Best regards,

Frank

by Bob M
Posted on Mon, 10/12/2020 - 14:01

Frank,

Thanks for the update. 

Unfortunately, using the windows installation is not an option for many as it requires a specific port in the company firewall to be open, which is often impossible to achieve. That is why users rely on the webstart version, as it isn't limited by this restriction. So all of them will be unable to use ARIS Express until the issue is resolved.

Ideally, removing the "phone home" functionally would prevent this ever being a problem - maybe you can consider this in future to prevent unnecessary difficulties for users.

Thanks. 

0
by Frank Weyand Author
Posted on Mon, 10/12/2020 - 16:21

Hi Bob,

thank you for you comment, but one thing: the versions themselve do not really differ. Both are "calling home" in order to check the password on the first log in. Only difference is, that the windows version does a check  whether there is an update, which is done by webstart itsself. It is definitly not necessary, at least after community account check, to leave some firewall port open. 

Bye

Frank

0
by Bob M
Posted on Tue, 10/13/2020 - 09:53

Frank, speaking personally, the Windows version installation does not complete in my corporate environment because when it tries to phone home with the user credentials, it fails as the port to do so is blocked by my firewall - the installation just gets stuck at that screen with the user unable to progress any further.  My company refuses to open the required port for security reasons.  So ARIS Express can never get installed at work by anyone here (and no doubt elsewhere that has similar restrictions). 

The webstart version appears to somehow tunnel the phone home authentication through the firewall without issue. But since it does the check every time it starts, revoking the certificate breaks the application - if this subsequent check was removed, users could continue to use ARIS Express regardless of whether the certificate was valid.

The Windows installation completes correctly when performed on my home PC. 

0
by Frank Weyand Author
Posted on Tue, 10/13/2020 - 17:20

Hi Bob.

ah, I got it. The call is the same. But for the windows version, it uses a mechanism to fetch the proxy. I referes to the system setttings.The webstart version does not use this mechanism, but uses the settings in the JRE settings. They might be different. But again: this is only for the registration. It does NOT do this everytime its starts, neither windows nor webstart. This is only the case if the user.cfg cannot be updated. If you clean this up, it will need to ask again. The windows version only does a call to check for update information.

0
by Felipe Acevedo Castro
Posted on Tue, 10/13/2020 - 21:09

Hi Frank,

To get ARIS Express back on a Mac, what can I do?

0
by Frank Weyand Author
Posted on Tue, 10/13/2020 - 22:00

Hi,

I do not know, if there is a way to convince your Mac to start Express anyway, but if the system insists of getting a certificate, nothing. We are right now setting up systems again, and we are getting a new certificate, but I do not have any "estimated time of arrival" right not until build systems are running, in order to get a new version. If you got the possibility, to start a windows image, you should do so.

Bye,

Frank

0
by C H
Posted on Fri, 10/16/2020 - 04:04

I've a windows version of ARIS Express downloaded to my laptop and am experiencing the same issue about a revoked certificate.  It was revoked on October 9th.  What can I do to obtain a new certificate?  Please advise.  Thanks.

0
by Lukas Kahr
Posted on Sun, 10/25/2020 - 11:33

Hello,

I have the same issue on my mac. Can you please update us once the certificat is functioning again?

Kind regards,
Lukas

0
by Aljoscha Heppner
Posted on Tue, 10/27/2020 - 12:37

Hi, we do have the same porblem with the certificate. We are using Windows-PCs in our school.

Please tell us asap when there is a solution.

0
by Frank Weyand Author
Posted on Tue, 10/27/2020 - 13:06

@all

We are making progress to set up systems and gaining a new certificate again, but currently, I cannot give you a point in time when the updated version will be available.

@Aljoscha Heppner: since you are using windows, there is no need to use the webstart version. You can use the windows installable version.

Bye,

Frank

0
by Aljoscha Heppner
Posted on Tue, 10/27/2020 - 13:21

Thank you for the quick response. Unfortunately i am not the administrator of our school. We cannot install software on the desktop-PCs. Our school is too big to install it everywhere. Anyway, which spezific Version would it be? And where can i download it?

0
by Frank Weyand Author
Posted on Tue, 10/27/2020 - 14:05

Hi, this is more or less the same version used as the webstart version... download it in the download section in the ARIS community.

You no not need to have administration rights to install it... it can be installed in the user's home.

0
by Stefan Gundelach
Posted on Mon, 11/09/2020 - 10:47

Gibt es schon eine Lösung für das Problem "Zertifikat entzogen"? Bin auf die Web-Start-Lösung in der Schule angewiesen, da alle Schüler ein MacBook haben. Wäre schön, wenn ich damit im Unterricht weiter arbeiten könnte...

Besten Dank im Voraus.

0
by Frank Weyand Author
Posted on Thu, 11/12/2020 - 13:49

Hi,

sorry, currently, we cannot give you any estimation, when we can update Express webstart version.

We are currently setting up all systems, and did not set up build system for our non-profit tools yet.
I would really recommend to go for using virtual machines on mac and use the windows version.

Bye,

Frank

0
by Aljoscha Heppner
Posted on Tue, 11/17/2020 - 10:46

Hi!

Do i understand you right, i should install ARIS express?

The students (an i aswell) do not have the rights to install software at the local disk. When i install it to our personal storage in our school-network, i am asked to put in my ARIS Community - user and password. Then it works!

How should the students install the version if they don't have a ARIS Community login?

Grüße aus Bremen, Aljoscha Heppner

0
by Frank Weyand Author
Posted on Tue, 11/17/2020 - 11:52

Hi,

well, that's the deal. Every user needs to have a community account. We provide the software and this forum for free, so all we request is the community account. But that has nothing to do with the webstart or windows version... this is a general prerequisite.

Bye,

Frank

0
by Ricardo Ferreira
Posted on Wed, 11/25/2020 - 19:48

Hi. For those that really need to install ARIS Express via the webstart version there is a workaround.

In the java console disable the certificate revocation cheks on the advanced settings (not recommended). If like  Bob M or myself you only need it for the 1st login because of firewall/proxy issues you can then enable it, delete the app from the java cache and keep only the windows installed version.

Hope this helps.

0
by Ricardo Ferreira
Posted on Mon, 12/07/2020 - 12:09

In reply to by tkazimie_pl

If you used the windows installer it should be on the folder C:\Program Files\ARIS Express\client\lib\

it's the express.jnlp

Hope it helps

0
by Mariana Mitevska
Posted on Fri, 11/27/2020 - 08:47

Hi guys,

I have a problem with the windows installation version because of this certificate. When I run the locally installed aris application, I experience an issue with not found JRE. Following this thread which explains how to deal with it https://www.ariscommunity.com/users/duezenb/2016-10-25-erros-starting-aris-express-launchercfg I tried to run express.jnlp, but the process cannot be completed because the certificate is invoked.

Please, could you advise what should I do?

Thank you!

0
by Wolf Duttlinger
Posted on Fri, 12/18/2020 - 14:24

hmm - running on Linux - seems like an issue. So I'm saying bye and use yEd ....

0
by Frank Weyand Author
Posted on Fri, 12/18/2020 - 16:08

Hi,

I'd like to upload the new version earlier, but for security reasons and efforts, we were not able to get our "Go" earlier. This will come soon, so we will update the new version also very soon. Right now, since there's the christmas holiday season, we won't do that, but directly afterwards, this is going to take place.

Bye,

Frank

0
by Frank Weyand Author
Posted on Fri, 01/08/2021 - 16:43

Hi folks,

this is to inform you, that the webstart version of Express is online again.

I might be necessary to remove the existing webstart version from your JRE. So, go to the java settings (in Windows, you can reach this via the system panel), in the first page go the the temporary internet settings and remove everything. Then, go the the download page for express (Download ARIS Express | ARIS BPM Community (ariscommunity.com)) and click the "download for other systems" (which means, not windows).

Bye,

Frank

0
by Bob M
Posted on Thu, 01/28/2021 - 16:29

Frank, thanks for the notification - all working well now.

0
by Aljoscha Heppner
Posted on Tue, 06/29/2021 - 11:22

Aris Express ist working. What about ARIS Connect? We do have the Portal Version: 98.2.0.1043013?

CertificateRevokedException... What can we do?

0

Featured achievement

Rookie
Say hello to the ARIS Community! Personalize your community experience by following forums or tags, liking a post or uploading a profile picture.
Recent Unlocks
  • Profile picture for user freddy
  • Profile picture for user mikhubb
  • Profile picture for user harryratia
  • DC
  • ВА
  • PacMan

Leaderboard

|
icon-arrow-down icon-arrow-cerulean-left icon-arrow-cerulean-right icon-arrow-down icon-arrow-left icon-arrow-right icon-arrow icon-back icon-close icon-comments icon-correct-answer icon-tick icon-download icon-facebook icon-flag icon-google-plus icon-hamburger icon-in icon-info icon-instagram icon-login-true icon-login icon-mail-notification icon-mail icon-mortarboard icon-newsletter icon-notification icon-pinterest icon-plus icon-rss icon-search icon-share icon-shield icon-snapchat icon-star icon-tutorials icon-twitter icon-universities icon-videos icon-views icon-whatsapp icon-xing icon-youtube icon-jobs icon-heart icon-heart2 aris-express bpm-glossary help-intro help-design Process_Mining_Icon help-publishing help-administration help-dashboarding help-archive help-risk icon-knowledge icon-question icon-events icon-message icon-more icon-pencil forum-icon icon-lock