JRE installer need to support a new command line argument that is a url pointing to the local security policy file. It should then pass the argument into deploy registerDeploy Java API and wait for the return results from registerDeploy. It will need to handle the return status acordingly - whether it's a success or error.

JRE installer on unix/macos already calls into the Java RegisterDeploy API for the purpose of setting the security level. The same mechanism of calling into Java RegisterDeploy API should be added to windows for this. We need to use Java RegisterDeploy API for this purpose because deploy would need to download the signed JAR file containing the policy, verify and install it on the user's system.