Install Java

Install Java. We recommend the OpenJDK Adoptium Temurin 8 or 11. This is the build of Open JDK that we test with across linux and windows.

Install the latest version and patch of Java

We strongly recommend that you use the latest version of Java. These instructions will give you the latest patch. You can choose to install Java 8 or Java 11. Unless you are updating an existing installation of Java 8 to the latest patch, please install Java 11.

If you are still on Java 8, you should consider updating to Java 11. Check on the controls in place in your organisation for moving to a different major version of a software package. However, in practice, moving from Java 8 to Java 11 is very unlikely to have an impact, and can be treated much as patching an existing version.

Windows

Download and install Java

  • Go to the releases page on the Adoptium site: https://adoptium.net/temurin/releases
  • Select the package you need, this is mostly like to be:
    • Operating System: Windows
    • Architecture: x64
    • Package Type: JDK
    • Version: 11

  • Download the msi package
  • Complete the installation process as directed by the package, accepting all defaults.

Configure Security

Update the security settings to allow strong encryption and decryption of files.

Open the java.security file.

Find the installation directory for Java. Typically this will be something like C:\Program Files\Eclipse Adoptium\jdk-11.0.14.101-hotspot

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION\jre\lib\security\java.security
  • For Java 11, JAVA_INSTALLATION\conf\security\java.security

Set the crypto.policy

Set the crypto.policy to unlimited, by deleting # to uncomment the line:
from #crypto.policy=unlimited
to   crypto.policy=unlimited

Linux

Download and install Java

These instructions assume you do not have a version of Java already installed on your server.

Instructions for installing on linux are here: https://adoptium.net/installation/linux/

In particular, for installing on Debian based linux distributions, carry out the following steps:

  • Install pre-requisite packages:
sudo apt-get install -y wget apt-transport-https
  • Install the Eclipse Adoptium GPG key:
wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo tee /usr/share/keyrings/adoptium.asc
  • Add the Eclipse Adoptium repository:
echo "deb [signed-by=/usr/share/keyrings/adoptium.asc] https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main" | sudo tee /etc/apt/sources.list.d/adoptium.list
  • Install Java:
sudo apt-get update
sudo apt-get install temurin-11-jdk

Configure Security

Update the security settings to allow strong encryption and decryption of files.

Open the java.security file

Find the installation directory for Java with the command:

update-alternatives --list java

This will give you the full path of the java program, for example: /usr/lib/jvm/temurin-11-jdk-amd64/bin/java. The installation directory in this case is /usr/lib/jvm/temurin-11-jdk-amd64.

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION/jre/lib/security/java.security
  • For Java 11, JAVA_INSTALLATION/conf/security/java.security

Set the crypto.policy

In the java.security file, set the crypto.policy to unlimited, by deleting # to uncomment the line:

from #crypto.policy=unlimited
to   crypto.policy=unlimited