Versions Compared

Old Version 18

changes.mady.by.user Chris Welford

Saved on

compared with

New Version Current

changes.mady.by.user Chris Welford

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Install Java. We recommend the OpenJDK Adoptium Temurin 8 or 11. This is the build of Open JDK that we test with across linux and windows.

Note

Install the latest version and patch of Java

We strongly recommend that you use the latest version of Java.

For versions before Java 1.8.0_151, you must install the JCE Unlimited Strength Jurisdiction Policy files.

Step 1 Download and Install Java

On Windows

...

These instructions will give you the latest patch. You can choose to install Java 8 or Java 11. Unless you are updating an existing installation of Java 8 to the latest patch, please install Java 11.

If you are still on Java 8, you should consider updating to Java 11. Check on the controls in place in your organisation for moving to a different major version of a software package. However, in practice, moving from Java 8 to Java 11 is very unlikely to have an impact, and can be treated much as patching an existing version.

Windows

Download and install Java

...

  • /temurin/releases
  • Select the package you need, this is mostly like to be:
    • Operating System: Windows
    • Architecture: x64
    • Package Type: JDK
    • Version: 11

Image Added

  • Download the msi package
  • Complete the installation process as directed by the package, accepting all defaults.

On Linux

Note

These instructions assume you do not have a version of Java already installed on your server. If you do, and you need to retain the version of Java you currently have, but this is not compatible with PhixFlow, you may need to set up different users to use different versions of Java. Typically this is done by setting the PATH environment variable for certain users. In the instructions below it is stated that setting JAVA_HOME is optional, but if you have this type of set up, you are recommended to set JAVA_HOME for the users (usually just tomcat) that need to use the particular version of Java you have installed for PhixFlow. If you need further guidance, ask PhixFlow support for advice.

These instructions are based on the notes provided by Adoptium for installation, at the links below. We have suggested some settings, for example, the placement of the downloaded installation package (/tmp) and the location for the Java installatoin (/opt/jdk). You can select another location if you wish, provided that they meet any requirements stated in the Adoptium installation notes.

  1. Prepare the installation directory:
    • If the directory /opt/jdk does not exist, create it:
Code Block
sudo mkdir /opt/jdk
sudo chmod 755 /opt/jdk
  1. Download Java from the Adoptium download page:

You can either:

  • Download the installation package using a web browser, and transfer the installation package to the directory /tmp on the server
  • Download the installation package directly to the server. To do this, find the URL of the latest download from the link on the website, and use it in a wget command as below:
Code Block
cd /tmp
wget https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u312-b07/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz
  1. Extract the installation package. For example:
Code Block
sudo tar xfvz /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz --directory /opt/jdk
rm /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz

PATH or update-alternatives?

...

Configure Security

Update the security settings to allow strong encryption and decryption of files.

Open the java.security file.

Find the installation directory for Java. Typically this will be something like C:\Program Files\Eclipse Adoptium\jdk-11.0.14.101-hotspot

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION\jre\lib\security\java.security
  • For Java 11, JAVA_INSTALLATION\conf\security\java.security

Set the crypto.policy

Set the crypto.policy to unlimited, by deleting # to uncomment the line:
from #crypto.policy=unlimited
to   crypto.policy=unlimited

Linux

Download and install Java

Note

These instructions assume you do not have a version of Java already installed on your server.

Instructions for installing on linux are here: https://adoptium.net/installation/linux/

In particular, for installing on Debian based linux distributions, carry out the following steps:

  • Install pre-requisite packages:
Code Block
sudo apt-get install -y wget apt-transport-https
  • Install the Eclipse Adoptium GPG key:
Code Block
wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo tee /usr/share/keyrings/adoptium.asc
  • Add the Eclipse Adoptium repository:
Code Block
echo "deb [signed-by=/usr/share/keyrings/adoptium.asc] https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main" | sudo tee /etc/apt/sources.list.d/adoptium.list
  • Install Java:
Code Block
sudo apt-get update
sudo apt-get install temurin-11-jdk


Configure Security

Update the security settings to allow strong encryption and decryption of files.

1. Go to the JRE directory /lib/security/java.security file.

Tip

If you have installed a JDK rather than a JRE, you will find this directory under JAVA_BASE_INSTALLATION/jre, for example:
   C:\Program Files\Eclipse Adoptium\jdk-8.0.312.7-hotspot\jre

...

Open the java.security file

Find the installation directory for Java with the command:

Code Block
update-alternatives --list java

This will give you the full path of the java program, for example: /usr/lib/jvm/temurin-11-jdk-amd64/bin/java. The installation directory in this case is /usr/lib/jvm/temurin-11-jdk-amd64.

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION/jre/lib/security/java.security
  • For Java 11, JAVA_INSTALLATION/conf/security/java.security

Set the crypto.policy

In the java.security file, set the crypto.policy to unlimited for the JRE used by PhixFlow, by deleting the #" to uncomment the line:    - from:

 # cryptofrom #crypto.policy=unlimited
    - to:    to   crypto.policy=unlimited

Step 3 Optionally Set the Environment Variable

Some installation processes set the environment variable JAVA_HOME for you automatically. If not, you do not need to set it. However, if you want to set it, specify the base installation directory of Java, for example:

...