--- SAS JAVA Install ---

---------------------------------------------------------
    cd /opt/sasinside
    ./SAS.Services stop
  
    systemctl stop crond
    systemctl status crond

https://support.sas.com/kb/56/203.html

Do this on the Master and the 3 Nodes.
================================================================================
rm -rf /var/tmp/old.jre
cd /opt/sasinside/sashome/SASPrivateJavaRuntimeEnvironment/9.4/
cp -rpf jre /var/tmp/old.jre

JAVA - update via DeploymentManager 
 ls -l /usr/local/src/SAS-JAVA/J1T004la.zip
-rw-r--r-- 1 root root 135935677 Mar 31 09:46 /usr/local/src/SAS-JAVA/J1T004la.zip

/opt/depot/JAVA/J1T004la.zip


Set the umask to 000 in the shell before launching the SAS Deployment Manager.
After installing the Hot Fix, issue the commands:
chmod -R 755  /opt/sasinside/sashome/SASPrivateJavaRuntimeEnvironment*

/opt/sasinside/sashome/SASDeploymentManager/9.4/sasdm.sh
      go to hotfix
      browse for the /opt/depot/JAVA directory
      follow the steps


There is also a backup created by the JAVA update that SAS does...
cd /opt/sasinside/sashome/SASPrivateJavaRuntimeEnvironment/9.4/installs/privatejre_lax* ???   

cd /opt/sasinside/sashome/SASPrivateJavaRuntimeEnvironment/9.4/jre/lib/fonts/
cp -pf  /var/tmp/old.jre/lib/fonts/* .

cd /opt/sasinside/sashome/SASPrivateJavaRuntimeEnvironment/9.4/jre/lib/security
cp -prf  /var/tmp/old.jre/lib/security/* .



ON SASMASTER
    cd /opt/sasinside
    ./SAS.Services start
    systemctl start crond
    systemctl status crond

for cert in `keytool -list -keystore cacerts -storepass changeit | grep trustedCertEntry | grep -Eo "^[^,]*"`;do
    `keytool -exportcert -keystore cacerts -alias $cert -file ${cert}.crt <<< $'changeit'`
done

opt/sasinside/sashome/SASPrivateJavaRuntimeEnvironment/9.4/jre/bin/keytool -list -keystore /opt/sasinside/sashome/SASSecurityCertificateFramework/1.1/cacerts/trustedcerts.jks -storepass change