Adding performance logger into deployment code, both Java plugin and Java webstart, in the area of security checking, certificate validation. It will be mostly in TrustDecider class, which is doing validation of certificate for signed Jar file, loading certificate from keystore and others.

This will help us to find out the bottle neck of our startup time, and give us some idea where we should try to address the issues.