Content

The following files in the WebSphere Application Server default java installation directory, or in the extension offering java installation directories are considered non-serviceable files. These files are shipped one time only, with the first installation of the product, and will not be updated again when WebSphere Application Server java i-fixes are applied, nor when WebSphere Application Server fix packs are applied. 

This information only applies to AIX, HP-UX, Linux, Solaris, and Windows platforms.  On z/OS, all java files for all java versions are serviceable.

WebSphere Application Server v9 and WebSphere Liberty

All files are serviceable

WebSphere Application Server v8.5.5.14 and IBM SDK, Java Technology Edition Version 8 SR5 FP15  and later

jre/lib/orb.properties
jre/lib/security/java.policy
jre/lib/security/cacerts

Notes:

• As of WebSphere Application Server fix pack 8.5.5.14 and IBM SDK, Java Technology Edition Version SR5 FP15, the java.security file is serviceable. When service is applied by an i-fix or a fix pack update, a one time back up of the WAS_HOME/java/jre/lib/security/java.security file will be placed in the same directory with the file extension .bak and the original file will be replaced.
• Custom updates to the java.security file should be applied in the WAS_HOME/Properties/java.security file so that future fix packs and updates do not override your custom settings.
• Many security updates become available through changes to the java.security file. To be certain that WebSphere Application Server is as secure as possible, the WAS_HOME/java/jre/lib/security/java.security file needs to be kept current.
• On z/OS, all java files for all java versions have always been serviceable.
• Special considerations for environments with SDK interim fixes: If any files under WAS_HOME/java are added or modified subsequent to installing an interim fix, the additions or changes will be lost when interim fixes are uninstalled.
  When the first JDK iFix is installed on top of a fixpack, it performs a backup of the WAS_HOME/java and saves it in WAS_HOME/properties/patches/backup. When the ifix is uninstalled (manually, or by a fixpack update that no longer requires the ifix) WAS_HOME/java will be removed and replaced by the backup

WebSphere Application Server v8.5 and v8.5.5 for Java 8, 7.1, 7 and 6

jre/lib/orb.properties
jre/lib/security/java.policy
jre/lib/security/java.security
jre/lib/security/cacerts

Notes:

• On z/OS, all java files for all java versions have always been serviceable.

WebSphere Application Server v8.0.x.x

jre/lib/orb.properties
jre/lib/security/java.policy
jre/lib/security/java.security
jre/lib/security/cacerts

Notes:

• On z/OS, all java files for all java versions have always been serviceable.

WebSphere Application Server v7.0.x.x
jre/lib/orb.properties
jre/lib/security/java.policy
jre/lib/security/java.security
jre/lib/security/cacerts

• This file is overwritten with SDK fix pack updates