Versions Compared

Old Version 21

changes.mady.by.user Chris Welford

Saved on

compared with

New Version Current

changes.mady.by.user Chris Welford

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Install Java. We recommend the OpenJDK Adoptium Temurin 8 or 11. This is the build of Open JDK that we test with across linux and windows.

Note

Install the latest version and patch of Java

We strongly recommend that you use the latest version of Java. These instructions will give you the latest patch. You can choose to install Java 8 or Java 11. Unless you are updating an existing installation of Java 8 to the latest patch, please install Java 11.

If you are still on Java 8, you should consider updating to Java 11. Check on the controls in place in your organisation for moving to a different major version of a software package. However, in practice, moving from Java 8 to Java 11 is very unlikely to have an impact, and can be treated much as patching an existing version.

Windows

...

Download and

...

install Java

On Windows

...

  • Go to the releases page on the Adoptium

...

...

  • /temurin/releases
  • Select the package you need, this is mostly like to be:
    • Operating System: Windows
    • Architecture: x64
    • Package Type: JDK
    • Version: 11

Image Added

  • Download the msi package
  • Complete the installation process as directed by the package, accepting all defaults.

Optionally Set the Environment Variable

You can set a system envrionment variable JAVA_HOME if you wish. This can be useful if you have other applications that use Java. However, for the operation of PhixFlow itself, this is not needed, and most operators choose not to add this. Even if you do not set JAVA_HOME, Java programs that need to operate PhixFlow will be added to your path. I.e. you can call them from the command line by using the program name alone.

If you decide to set JAVA_HOME as a system envrionment variable, specify the base installation directory of Java, for example:

Configure Security

Update the security settings to allow strong encryption and decryption of files.

Open the java.security file.

Find the installation directory for Java. Typically this will be something like C:\Program Files\Eclipse Adoptium\jdk-

...

11.0.

...

14.

...

101-hotspot

On Linux

Note

Setting JAVA_HOME

These instructions assume you do not have a version of Java already installed on your server. If you do, and you need to retain the version of Java you currently have, but this is not compatible with PhixFlow, you may need to set up different users to use different versions of Java. Typically this is done by setting the PATH environment variable for certain users. In these instructions JAVA_HOME is set for all users, but this is only a recommended option, and is not mandatory for the operation of PhixFlow.

Where a java program is needed for PhixFlow, the documentation will either suggest that you supply the full path, or will refer to JAVA_HOME. If you do not set JAVA_HOME in this way, simply add the full path of the Java installation used by PhixFlow.

  • Prepare the installation directory:
    • If the directory /opt/jdk does not exist, create it:
Code Block
sudo mkdir /opt/jdk
sudo chmod 755 /opt/jdk

...

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION\jre\lib\security\java.security
  • For Java 11, JAVA_INSTALLATION\conf\security\java.security

Set the crypto.policy

Set the crypto.policy to unlimited, by deleting # to uncomment the line:
from #crypto.policy=unlimited
to   crypto.policy=unlimited

Linux

Download and install Java

Note

These instructions assume you do not have a version of Java already installed on your server.

Instructions for installing on linux are here: https://adoptium.net/installation

...

The download link is included in the text of the installation steps:

Image Removed

You can either:

  • Download the installation package by clicking on the download link in a web browser, and transfer the downloaded installation package to the directory /tmp on the server
  • Download the installation package directly to the server. To do this, copy the address of the download link (e.g. using Right-click → Copy Link in a browser), and use this in a wget command as below:
Code Block
cd /tmp
wget https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u312-b07/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz
  • Validate the package download. The commands below are towards the bottom of the installation page.

If you have access to the web from your server, copy the command similar to the below from the installation page and run it on your server:

Image Removed

If you do not have web access from your server, copy the command similar to the below from the installation page and run it on your server.

Image Removed

Then compare the results against the value provided at the checksum link on the installation page.

  • Extract the installation package
Code Block
sudo tar xfvz /tmp/[DOWNLOADED PACKAGE] --directory /opt/jdk
rm /tmp/[DOWNLOADED PACKAGE]

For example:

Code Block
sudo tar xfvz /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz --directory /opt/jdk
rm /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz
  • Set JAVA_HOME for all users

...

/linux/

In particular, for installing on Debian based linux distributions, carry out the following steps:

  • Install pre-requisite packages:
Code Block
sudo apt-get install -y wget apt-transport-https
  • Install the Eclipse Adoptium GPG key:
Code Block
wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo tee /usr/share/keyrings/adoptium.asc
  • Add the Eclipse Adoptium repository:
Code Block
echo "deb [signed-by=/usr/share/keyrings/adoptium.asc] https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main" | sudo tee /etc/apt/profilesources.list.d/jdkadoptium.sh

...

list
  • Install Java:
Code Block
echo "export JAVA_HOME=/opt/jdk/jdk-11.0.13+8" | sudo tee /etc/profile.d/jdk.sh
  • To test that you have correctly set the value, start a new session and run, as any user
Code Block
echo $JAVA_HOME

...

sudo apt-get update
sudo apt-get install temurin-11-jdk


Configure Security

Update the security settings to allow strong encryption and decryption of files.1.

Open the java.security file

...

...

Find the installation directory for Java with the command:

Code Block
update-alternatives --list java

This will give you the full path of the java program, for example: /usr/lib/jvm/temurin-11-jdk-amd64/bin/java. The installation directory in this case is /usr/lib/jvm/temurin-11-jdk-amd64.

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION/jre/lib/security/java.security
  • For Java 11,

...

  • JAVA_

...

  • INSTALLATION/conf/security/java.security

...

Set the crypto.policy

In the java.security file, set the crypto.policy to unlimited for the JRE used by PhixFlow, by deleting the #" to uncomment the line:    - from:

 # cryptofrom #crypto.policy=unlimited
    - to:    to   crypto.policy=unlimited