Updating Java 8 JDK & JCE on JSS

[dstranathan]

All

Just curious, how often do you update the Java JDK on your JSS server? Do you stay as up-to-date as possible?

I'm still running Java 8 u65 circa October 2015 (a few versions old).

When the JDK is updated on the JSS, do the corresponding JCE crypto files need to be updated, too?

[Aziz]

We usually update Java when there's a JSS update available.

As for the Java Cryptography Extension (JCE), they HAVE to match the version of Java installed or else the JSS will fail to start.

We're currently on 8u66, we'll probably update to 72 by late February.

[dstranathan]

I wasn't sure if the JCE files are in lock-step with the Java JDK releases or not. When looking at the JCE page on Oracle's Java site (http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html) it doesnt appear that the JCE files are incremementally updated. For example, I see a JCE installer for Java 8 but not a specific Java sub-version. In fact, it appears to still be the same JCE files I installed back in October. Comments?

also - When you patch the Java JDK on your JSS servers, do you just run the updates from the Java control panel (Win) & Pref Pane (Mac)- or do you actually download and install the full JDK installer again?

[Aziz]

@dstranathan

I apologize for the late response, I just saw this update.

There are no incremental JCE updates. What happens for us is whenever we update Java, it overwrites the JCE files. We usually download the installer directly from Java.com and run it.

Windows Server 2012 R2 Stanard if that matters.

[dstranathan]

@Abdiaziz No worries.

I noticed the same behavior - Java overwrites the exisiting JCE files.

I noticed I have to manaully tell Windows about the new JRE and JDK enviromental variables, otherwise Windows still paths to the previous versions.

Do you run Add/Remove Programs to delete the older versions of the JDK/JRE? I noticed that Windows holds on to them. I have been able to scuccessfully remove older JREs from Add/Remove Programs, but I get errors if I try and remove the JDK. Im OCD about this kind of "cruft".

[Aziz]

@dstranathan

For the system environmental variables, that sounds about right.

About two months ago we had an issue with Apache Tomcat pointing to the previous version of Java installed on the OS. We had to go to C:Program FilesJSSTomcatin omcat7w.exe and change it to reflect the latest version installed.

We always try to uninstall the previous version of Java after before upgrading Java.

[dstranathan]

@Abdiaziz

I assume that if "Use default" is checked in C:Program FilesJSSTomcatin omcat7w.ex, then Tomcat will uses the Microsoft Windows Java default? My Java path is blank in Tomcat, so I would guess its finding the path to Java from the host OS...correct?

[Aziz]

@dstranathan

"Use Default" was left unchecked for us. I just upgraded Java on our JSS and it worked fine. Apache pointed to the system default.

[dstranathan]

Weird. I wonder if mine is set incorrectly. Clearly my JSS is working. Im logged into the 9.81 JSS admin web interface now and clients are getting Policies/Profiles etc.

I havent ever changed any settings in the Tomcat admin app. I can only assume that its always been set to "Use default". My JSS was recently built in a JumpStart back in November. I have only updated my JDK/JRE once (from u65 to u72 I think).