Upgraded Java, CF still using older version - how?
This server is Win2008 fully patched, IIS 7.0 in good shape - CF 9.0 no patches installed - which we obviously want to fix. When we tried to install patches, we got this:

To try and resolve this, our first mistake was installing Java version 8 (1.8) - which we-now-know doesn't work with 9.0. What I'm not following is why CF settings reports still using 1.6. From what I've read and can see in java.config, it's storing/accessing its own JRE in CF directories. 2 questions: 1) How can I access the security settings for this JRE so I can get patches installed 2) If not possible, am I right in thinking we have to uninstall 8, reinstall the server version of 6 (1.6), point CF at the server version of Java so we can change the security settings (with restarts at the proper places) so we can start getting security patches installed? Any alterations to those steps?
Once I get to patch 4 we'll be upgrading to Java 7 - does CF 9.01 fully patched work with Java 1.8? I see Java 7 is due to expire April 2015.