Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 24 Next »

Install Java. We recommend the OpenJDK Adoptium Temurin 8 or 11. This is the build of Open JDK that we test with across linux and windows.

Install the latest version and patch of Java

We strongly recommend that you use the latest version of Java. These instructions will give you the latest patch. You can choose to install Java 8 or Java 11. Unless you are updating an existing installation of Java 8 to the latest patch, please install Java 11.

If you are still on Java 8, you should consider updating to Java 11. Check on the controls in place in your organisation for moving to a different major version of a software package. However, in practice, moving from Java 8 to Java 11 is very unlikely to have an impact, and can be treated much as patching an existing version.

Windows

Download and install Java

  1. From the Adoptium home page https://adoptium.net, select Termurin 8 or 11.
    This download is equivalent to the Adopt Open JDK HotSpot build of Java for 64 bit architectures.
  2. Click the Latest release button to download an installation package.
  3. Complete the installation process as directed by the package, accepting all defaults.

Optionally Set the Environment Variable

You can set a system envrionment variable JAVA_HOME if you wish. This can be useful if you have other applications that use Java. However, for the operation of PhixFlow itself, this is not needed, and most operators choose not to add this. Even if you do not set JAVA_HOME, Java programs that need to operate PhixFlow will be added to your path. I.e. you can call them from the command line by using the program name alone.

If you decide to set JAVA_HOME as a system envrionment variable, specify the base installation directory of Java, for example:

  • C:\Program Files\Eclipse Adoptium\jdk-8.0.312.7-hotspot

Configure Security

Update the security settings to allow strong encryption and decryption of files.

1. Open the java.security file.

For Java 8, this will be at JAVA_HOME\jre\lib\security\java.security

For Java 11, this will be at JAVA_HOME\conf\security\java.security

2. Set the crypto.policy to unlimited for the JRE used by PhixFlow, by deleting the # to uncomment the line:
    - from: #crypto.policy=unlimited
    - to:   crypto.policy=unlimited

Linux

Download and install Java

Setting JAVA_HOME

These instructions assume you do not have a version of Java already installed on your server. If you do, and you need to retain the version of Java you currently have, but this is not compatible with PhixFlow, you may need to set up different users to use different versions of Java. Typically this is done by setting the PATH environment variable for certain users. In these instructions JAVA_HOME is set for all users, but this is only a recommended option, and is not mandatory for the operation of PhixFlow.

Where a java program is needed for PhixFlow, the documentation will either suggest that you supply the full path, or will refer to JAVA_HOME. If you do not set JAVA_HOME in this way, simply add the full path of the Java installation used by PhixFlow.

  • Prepare the installation directory:
    • If the directory /opt/jdk does not exist, create it:
sudo mkdir /opt/jdk
sudo chmod 755 /opt/jdk

The download link is included in the text of the installation steps:

You can either:

  • Download the installation package by clicking on the download link in a web browser, and transfer the downloaded installation package to the directory /tmp on the server
  • Download the installation package directly to the server. To do this, copy the address of the download link (e.g. using Right-click → Copy Link in a browser), and use this in a wget command as below:
cd /tmp
wget https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u312-b07/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz
  • Validate the package download. The commands below are towards the bottom of the installation page.

If you have access to the web from your server, copy the command similar to the below from the installation page and run it on your server:

If you do not have web access from your server, copy the command similar to the below from the installation page and run it on your server.

Then compare the results against the value provided at the checksum link on the installation page.

  • Extract the installation package
sudo tar xfvz /tmp/[DOWNLOADED PACKAGE] --directory /opt/jdk
rm /tmp/[DOWNLOADED PACKAGE]

For example:

sudo tar xfvz /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz --directory /opt/jdk
rm /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz

Set JAVA_HOME

  • Set JAVA_HOME for all users
echo "export JAVA_HOME=[Java home installation directory]" | sudo tee /etc/profile.d/jdk.sh

For example

echo "export JAVA_HOME=/opt/jdk/jdk-11.0.13+8" | sudo tee /etc/profile.d/jdk.sh
  • To test that you have correctly set the value, start a new session and run, as any user
echo $JAVA_HOME

Configure Security

Update the security settings to allow strong encryption and decryption of files.

1. Open the java.security file.

For Java 8, this will be at JAVA_HOME/jre/lib/security/java.security

For Java 11, this will be at JAVA_HOME/conf/security/java.security

2. Set the crypto.policy to unlimited for the JRE used by PhixFlow, by deleting the #" to uncomment the line:
    - from: # crypto.policy=unlimited
    - to:    crypto.policy=unlimited



  • No labels