# Missing Security Jars 8.1.34 and higher

**URL:** <https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035>\
**Category:** Module Development\
**Created:** [February 20, 2024, 5:00pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035 "2024-02-20T17:00:29Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![meredithj](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@meredithj](https://forum.inductiveautomation.com/u/meredithj)\
**Post date:** [February 20, 2024, 5:00pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/1 "2024-02-20T17:00:29Z")

</div>

Hello,  
Looks like in 8.1.34 and higher, the client-api and designer-api artifacts both have a dependency on an artifact called security.

```auto
<dependency>
<groupId>com.inductiveautomation.ignition</groupId>
<artifactId>security</artifactId>
<version>8.1.37</version>
<scope>compile</scope>
</dependency>

```

Any plan to publish this artifact? Looks like this issue exists for 8.1.34-8.1.37 so far. I assume it is related to signature verification.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 20, 2024, 5:05pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/2 "2024-02-20T17:05:33Z")

</div>

Where are you seeing this dependency listed?

---

<div class="post-metadata">

**Author:** ![meredithj](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@meredithj](https://forum.inductiveautomation.com/u/meredithj)\
**Post date:** [February 20, 2024, 5:08pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/3 "2024-02-20T17:08:16Z")

</div>

I updated the vision-component example in the sdk examples for the following error but I get the issue inside of my custom module as well.

```auto
Downloading from releases: https://nexus.inductiveautomation.com/repository/inductiveautomation-releases/com/inductiveautomation/ignition/security/8.1.37/security-8.1.37.pom
Downloading from thirdparty: https://nexus.inductiveautomation.com/repository/inductiveautomation-thirdparty/com/inductiveautomation/ignition/security/8.1.37/security-8.1.37.pom
[WARNING] The POM for com.inductiveautomation.ignition:security:jar:8.1.37 is missing, no dependency information available
Downloading from releases: https://nexus.inductiveautomation.com/repository/inductiveautomation-releases/com/inductiveautomation/ignition/security/8.1.37/security-8.1.37.jar
Downloading from thirdparty: https://nexus.inductiveautomation.com/repository/inductiveautomation-thirdparty/com/inductiveautomation/ignition/security/8.1.37/security-8.1.37.jar

```

```auto
[ERROR] Failed to execute goal on project ce-client: Could not resolve dependencies for project com.inductiveautomation.ignition.examples:ce-client:jar:1.8.0: The following artifacts could not be resolved: com.inductiveautomation.ignition:security:jar:8.1.37 (absent): Could not find artifact com.inductiveautomation.ignition:security:jar:8.1.37 in releases (https://nexus.inductiveautomation.com/repository/inductiveautomation-releases) -> [Help 1]

```

If I dig into the published pom files on nexus is how I get to that dependency.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 20, 2024, 5:08pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/4 "2024-02-20T17:08:40Z")

</div>

> [@meredithj](#):
>
> If I dig into the published pom files on nexus is how I get to that dependency.

Which one? I'm poking around and not seeing it for some reason.

---

<div class="post-metadata">

**Author:** ![meredithj](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@meredithj](https://forum.inductiveautomation.com/u/meredithj)\
**Post date:** [February 20, 2024, 5:10pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/5 "2024-02-20T17:10:25Z")

</div>

Have to go into the client bootstrap which is a dependency of client-api.

[https://nexus.inductiveautomation.com/repository/inductiveautomation-releases/com/inductiveautomation/ignition/client-bootstrap/8.1.37/client-bootstrap-8.1.37.pom](https://nexus.inductiveautomation.com/repository/inductiveautomation-releases/com/inductiveautomation/ignition/client-bootstrap/8.1.37/client-bootstrap-8.1.37.pom)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 20, 2024, 5:11pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/6 "2024-02-20T17:11:01Z")

</div>

Yep thanks, we're looking at this internally right now. It seems just an oversight that the security jar isn't published.

---

<div class="post-metadata">

**Author:** ![meredithj](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@meredithj](https://forum.inductiveautomation.com/u/meredithj)\
**Post date:** [February 20, 2024, 5:12pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/7 "2024-02-20T17:12:22Z")

</div>

Is that going to be something that is fixed before 8.1.38 or is it something that can be published before?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 20, 2024, 5:12pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/8 "2024-02-20T17:12:45Z")

</div>

In theory we should be able to retroactively publish it for each missing version... not sure what the infra/build guys will actually do.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 20, 2024, 5:14pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/9 "2024-02-20T17:14:23Z")

</div>

I'd imagine you can get your build working right now by adding an exclusion for that artifact underneath whichever SDK dependencies transitively include it.

---

<div class="post-metadata">

**Author:** ![jcoffman](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jcoffman/32/6429_2.png) [@jcoffman](https://forum.inductiveautomation.com/u/jcoffman)\
**Post date:** [February 20, 2024, 5:37pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/10 "2024-02-20T17:37:14Z")

</div>

I have published the missing jars (8.1.34 through 8.1.37) and made sure it will be published automatically with the 8.1.38 release going forward.

---

<div class="post-metadata">

**Author:** ![meredithj](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@meredithj](https://forum.inductiveautomation.com/u/meredithj)\
**Post date:** [February 20, 2024, 5:39pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/11 "2024-02-20T17:39:14Z")

</div>

Thank you!  
I see 8.1.34 and 8.1.37 jars. I assume the others are coming down the pipeline still.

---

<div class="post-metadata">

**Author:** ![jcoffman](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jcoffman/32/6429_2.png) [@jcoffman](https://forum.inductiveautomation.com/u/jcoffman)\
**Post date:** [February 20, 2024, 7:05pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/12 "2024-02-20T19:05:19Z")

</div>

They are all available, they may not be indexed by our public nexus yet (iirc someone has to attempt to pull that version first)

---

<div class="post-metadata">

**Author:** ![KathyApplebaum](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kathyapplebaum/32/7261_2.png) [@KathyApplebaum](https://forum.inductiveautomation.com/u/KathyApplebaum)\
**Post date:** [February 20, 2024, 7:07pm UTC](https://forum.inductiveautomation.com/t/missing-security-jars-8-1-34-and-higher/86035/13 "2024-02-20T19:07:16Z")

</div>

> [@jcoffman](#):
>
> iirc someone has to attempt to pull that version first

Yes, that's currently the case.