Update the JDK and JRE for SolarWinds Platform (self-hosted) products that use Java, including SAM and VMAN

12/20/2019 6:20 PM

4/2/2025 3:33 PM

The OpenJDK is an open-source implementation of the Java Platform, Standard Edition (SE) that includes the Java Runtime Environment (JRE). SolarWinds Platform (or Orion Platform) products such as SAM and VMAN include an open-source version of the JRE. 

This article describes how to update:

• The Java Development Kit (JDK) used by the SolarWinds JMX Bridge to monitor WebSphere, WebLogic, and Apache Tomcat servers in SAM.
• The JRE used by the SolarWinds Platform. For example, VMAN uses a Java poller to monitor Hyper-V environments.

Note the following details:

• SolarWinds Platform 2023.1 and above includes the JRE for OpenJDK 11.X (Microsoft Build)
• Orion Platform 2020.2.6 includes the JRE for OpenJDK 16.X
• Orion Platform 2020.2.5 includes the JRE for OpenJDK 15.X
• Web Help Desk 12.7 includes the JRE for OpenJDK 15.X
• Orion Platform 2020.2.1 — 2020.2.4 includes the JRE for OpenJDK 14.0.
• In SAM, agentless and Orion Agent for Windows polling uses the JMX Bridge Service but the Linux agent does not. Linux-based JMX queries run locally through the Orion agent itself. 
• See also Configure Java application servers and JVMs for SAM monitoring.

Server Application Monitor

Important: SolarWinds recommends backing up the SolarWinds Platform database before updating the JDK and JRE on the SolarWinds Platform server. See Back up the SolarWinds Orion database using SQL Server Management Studio.

To update the JRE:

1. Log in as an administrator.
2. Backup the “C:\Program Files\SolarWinds\Orion\OpenJDK“ folder. 
   1. If the SolarWinds Platform version is 2020.6 or lower, this folder is located in "Program Files (x86)".
3. Stop the SolarWinds Platform services. Do not restart them. See Shutdown and restart Orion services with the Orion Service Manager.
4. Delete all “OpenJDK” contents folder except the “templates” folder. 
5. Erase all the contents of the “templates” folder. 
6. Download the JDK version (.zip file) you want to install from Download the Microsoft Build of OpenJDK | Microsoft Learn, or download the installer version from https://jdk.java.net and follow the onscreen installation steps. 
7. Extract the archive and copy the contents of the “jdk-##” folder to “OpenJDK“ folder. Make sure that the “OpenJDK” folder contains “lib”, “bin”, “conf”, etc. 
8. To update the JRE on a Linux system for SAM, see Installation of the JDK on Linux Platforms.
9. Copy the “java.security” file (/jdk-##/conf/security) into the OpenJDK “templates” folder from the OpenJDK and rename it to “java-fips-disabled.security”. 
10. Copy the “java.security” file into the "templates" folder again and rename it to “java-fips-enabled.security”.
11. Open the "java-fips-enabled.security" file in a text editor, delete all lines containing "security.provider.#=XXXXXX" and replace them with the following:
    

    security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider C:DEFRND[HmacSHA512];ENABLE{ALL};
    
    security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider fips:BCFIPS
    
    security.provider.3=SunMSCAPI
    
    security.provider.4=SUN

12. Update the line "keystore.type=pkcs12" to "keystore.type=BCFKS".
13. Update the line "ssl.KeyManagerFactory.algorithm=SunX509" to "ssl.KeyManagerFactory.algorithm=X509" and save the file.
14. Start the SolarWinds Platform services.

Note the following details about these steps:

• If you have a license for the commercial edition of the JDK, you can download that version instead of the open-source version referenced in step 3. Navigate to the Java > Java SE > Downloads page at https://www.oracle.com/technetwork/java/javase/downloads/index.html.
• When you update the JRE on a Windows machine (steps 6 and 7), the JMX Bridge used by SAM automatically defaults to use the JDK files in C:\Program Files (x86)\SolarWinds\Orion\OpenJDK\##