OMSA: Outdated bundled JRE libraries cause file security scanner warnings

Summary: This article provides information about why security scanners flag the port used for OpenManage Server Administrator (OMSA)

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Some file-based security scanners my flag the Java Runtime Engine (JRE) library files bundled with Dell OpenManage Server Administrator (OMSA). These warnings may still occur even if a newer alternative installed JRE is specified in the web preferences to be used by the OMSA version 8.x or 9.x web service.

Cause

The scanner is identifying the bundled java version in OMSA.

Resolution

To prevent the security scanner warnings, you cannot just remove the older bundled JRE files because OpenManage Server Administrator's web service no longer starts if they are missing.

Instead it is recommended to replace the bundled JRE library files with the newer files downloaded from a JRE package downloaded from java.oracle.comThis hyperlink is taking you to a website outside of Dell Technologies..

Windows

  1. In the Services control panel, stop the "DSM SA Connection Service"
  2. Rename the "jre" directory within C:\Program Files\Dell\Sysmgt\ (with plans to eventually delete it)
  3. Copy the entire /jre directory in its place from the newer JRE package downloaded from java.oracle.comThis hyperlink is taking you to a website outside of Dell Technologies.
  4. Start the "DSA SA Connection Service"


Linux

  1. First stop all OMSA services with "srvadmin-service stop"
  2. Rename the "jre" directory within /opt/dell/srvadmin/ (with plans to eventually delete it)
  3. Copy the entire /jre directory in its place from the newer JRE package downloaded from java.oracle.com
  4. Start OMSA services with "srvadmin-service start"
Note: OMSA's Software page of subcomponent versions still link "Java Engine" with the original bundled JRE version because that version string resides in a static text file.

Affected Products

OpenManage Server Administrator
Article Properties
Article Number: 000177500
Article Type: Solution
Last Modified: 11 Aug 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.