# Blocked Vision app for security

**URL:** <https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821>\
**Category:** Ignition\
**Tags:** vision\
**Created:** [April 8, 2025, 10:00am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821 "2025-04-08T10:00:53Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alejandro\_Alaco](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alejandro_alaco/32/59849_2.png) [@Alejandro\_Alaco](https://forum.inductiveautomation.com/u/Alejandro_Alaco)\
**Post date:** [April 8, 2025, 10:00am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/1 "2025-04-08T10:00:53Z")

</div>

Hello,

We have a Vision app on server and we can´t open it from that server and we getting this message, we cant open it from somewhere else.  
Also this app is inestable for some users, sometimes they can connect, sometimes can´t, may be related with this issue.

Application blocked for security

The certificate could not be validated.  
The application will not be executed.

Publisher: Inductive Automation

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/a/6ab35a79e7afbf8e85da1bc80ecbc2d60ad4886c.png)

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/c/1/c15abdc6a440aa44ab8c09ea975038fe172bb37f.png)

Any idea on how to fix this problem welcome.

Cheers!

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [April 8, 2025, 10:54am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/2 "2025-04-08T10:54:10Z")

</div>

This can be handled by adding an exception to Java security settings to allow execution from that URL.

- Also, it would have to be done on every machine.
- Also-also, you might have to do it again if Java gets upgraded.

The correct answer is don't use Java Webstart. Webstart is dead. Use a client launcher with java built-in.

What version is this?

---

<div class="post-metadata">

**Author:** ![Alejandro\_Alaco](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alejandro_alaco/32/59849_2.png) [@Alejandro\_Alaco](https://forum.inductiveautomation.com/u/Alejandro_Alaco)\
**Post date:** [April 8, 2025, 11:11am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/3 "2025-04-08T11:11:04Z")

</div>

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/f/4f32e39a5d1234c597793c1a4c5ff23112d1a4ca.png)

Java 8 running on a Windows 12 Server.

I wonder if it would be easy to move the project to another server.

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [April 8, 2025, 11:30am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/4 "2025-04-08T11:30:53Z")

</div>

What version of Ignition? If it's a 7.9 installation, you can go to the latest 7.9 version and have the built-in Java.

---

<div class="post-metadata">

**Author:** ![Alejandro\_Alaco](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alejandro_alaco/32/59849_2.png) [@Alejandro\_Alaco](https://forum.inductiveautomation.com/u/Alejandro_Alaco)\
**Post date:** [April 8, 2025, 11:39am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/5 "2025-04-08T11:39:25Z")

</div>

Yes, it´s a 7.9 from 2019, how can I switch to the built-in Java?

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/b/4b722c18008a999ba0927c0ada515a4d2cb39200.png)

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [April 8, 2025, 11:43am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/6 "2025-04-08T11:43:23Z")

</div>

> **[Current Ignition Release | Inductive Automation](https://inductiveautomation.com/downloads/ignition/7.9.21)**
>
> Download and start using the world's most powerful SCADA software in just minutes. Cross-platform, with installers
> available for multiple operating systems.

---

<div class="post-metadata">

**Author:** ![Alejandro\_Alaco](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alejandro_alaco/32/59849_2.png) [@Alejandro\_Alaco](https://forum.inductiveautomation.com/u/Alejandro_Alaco)\
**Post date:** [April 8, 2025, 11:44am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/7 "2025-04-08T11:44:09Z")

</div>

I install this version on my computer and should work fine?

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [April 8, 2025, 11:45am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/8 "2025-04-08T11:45:09Z")

</div>

I've not had an issue within the same major revision.

You will still need to go to each client and install the launcher.

---

<div class="post-metadata">

**Author:** ![avaughn](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/avaughn/32/38972_2.png) [@avaughn](https://forum.inductiveautomation.com/u/avaughn)\
**Post date:** [April 8, 2025, 11:46am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/9 "2025-04-08T11:46:38Z")

</div>

It's probably still worth upgrading to 7.9.21, but the Native Client Launcher started embedding Java with 7.9.10.

> **[Native Client Launchers | Ignition User Manual](https://docs.inductiveautomation.com/docs/7.9/clients/native-client-launchers)**
>
> The Ignition Gateway contains downloadable native executables that can launch Clients directly without invoking Java Web Start. Using the native executables you can set up Clients in ways that are impossible to achieve with Java Web Start, such as...

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/a/6a3afad1c47ff58cf1bf6f5fec427807cfa153dc.png)

---

<div class="post-metadata">

**Author:** ![Alejandro\_Alaco](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alejandro_alaco/32/59849_2.png) [@Alejandro\_Alaco](https://forum.inductiveautomation.com/u/Alejandro_Alaco)\
**Post date:** [April 8, 2025, 11:48am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/10 "2025-04-08T11:48:59Z")

</div>

Ok, thans @JordanCClark and @avaughn

Will check it out if I still have problems after add an exception to Java security settings.

This upgrade Ignition solution seem more trouble as I would need to check clients afterwards.

Cheers!

---

<div class="post-metadata">

**Author:** ![avaughn](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/avaughn/32/38972_2.png) [@avaughn](https://forum.inductiveautomation.com/u/avaughn)\
**Post date:** [April 8, 2025, 11:53am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/11 "2025-04-08T11:53:12Z")

</div>

There's also this KBA that goes over the available options and provides the information you would need to set in the Java Security Settings if you decide not to use the NCL.

[https://support.inductiveautomation.com/hc/en-us/articles/360047135532-Ignition-Client-Blocked-by-Java-Security-Settings-Certificate-Expired](https://support.inductiveautomation.com/hc/en-us/articles/360047135532-Ignition-Client-Blocked-by-Java-Security-Settings-Certificate-Expired)

---

<div class="post-metadata">

**Author:** ![Alejandro\_Alaco](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alejandro_alaco/32/59849_2.png) [@Alejandro\_Alaco](https://forum.inductiveautomation.com/u/Alejandro_Alaco)\
**Post date:** [April 8, 2025, 11:55am UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/12 "2025-04-08T11:55:01Z")

</div>

Thanks a lot @avaughn , that´s very helpful

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [April 8, 2025, 12:12pm UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/13 "2025-04-08T12:12:33Z")

</div>

> [@Alejandro\_Alaco](#):
>
> This upgrade Ignition solution seem more trouble as I would need to check clients afterwards.

Trouble is our business. Do it in stages. Take care of the hemorrhaging first, then bring them up to date.

> [@Java version client sadness](https://forum.inductiveautomation.com/t/java-version-client-sadness/14033/3):
>
> Here is what I use. A folder with a copy of the NCL plus pre-made links. A batch file to handle the installation. The batch file removes any webstart apps and the user’s .ignition folder, copies the folder with the NCL into the user’s profile, then copies the links to the desktop. @echo off ECHO Removing user's .ignition folder... rd %userprofile%\.ignition /q /s ECHO Removing Java Webstart applications... javaws.exe -uninstall ECHO Copying Client Launcher... XCOPY…

---

<div class="post-metadata">

**Author:** ![Alejandro\_Alaco](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/alejandro_alaco/32/59849_2.png) [@Alejandro\_Alaco](https://forum.inductiveautomation.com/u/Alejandro_Alaco)\
**Post date:** [April 8, 2025, 12:18pm UTC](https://forum.inductiveautomation.com/t/blocked-vision-app-for-security/104821/14 "2025-04-08T12:18:27Z")

</div>

Thanks @JordanCClark
