It was recently discovered that in MII 14.0 the illum8.zip (The applet library) was temporarily released to the SAP Service Marketplace (SMP) unsigned; while it was only for a short period of time it's important to understand how to check if you downloaded/deployed this version. The first indication that your illum8.zip library is unsigned is that you get a JRE security pop-up warning you that applets on your page are unsigned. To verify if this is the case first please verify that you have followed the steps in this note:
1941458 - MII Applet - Oracle JRE Security Popups: http://service.sap.com/sap/support/notes/1941458
From here you will notice that in the release notes for SAP MII 14.0 that this signing of the applet library was resolved in SP05: http://service.sap.com/sap/support/notes/2002268
If you still think you have issues you can always directly verify that the illum8.zip package is signed by following these steps:
- Open the SCA with a ZIP archive tool (I use WinRAR). Go to DEPLOYARCHIVES\xapps~xmii~ear.sda, open that, then open sap.com~xapps~xmii~web.war. Then open the Classes directory. The illum8.zip package is there. Export it to a local directory.
- If you don’t have a JDK installed on your system, go install one. The latest Java 6 is fine.
- Once the JDK is installed, run the following: “jarsigner –verify –verbose –certs C:\temp\illum8.zip” (or wherever the file is).
- You will get a ton of text back but the critical bit is to look for the certs information. You might see one for “Lighthammer/SAP”, that’s the self-signed certificate. There should be an additional one from VeriSign, that’s the official certificate. The VeriSign one is the critical one. You get so much text because each file within the archive is signed by the certificate.
If you don't see the "VeriSign" entry then you will have to download the latest SP/Patch (currently SP05 Patch 11) for MII 14.0 in order to ensure the applet library is properly signed.
Hope this helps,
Sam