Product Q&As
ForgeRock Identity Platform
Does not apply to Identity Cloud
What Java versions are ForgeRock products supported on?
The purpose of this article is to provide information on the supported Java® versions across the ForgeRock platform (AM, DS, IDM and IG).
1 reader recommends this article
Java 11 Known Issues
You should ensure you always use a supported Java version as summarized below and as detailed in all release notes.
Additionally, there are some known issues with certain Java 11 versions and ForgeRock products. The main ones to be aware of when upgrading are:
| Product | Details |
|---|---|
| All | There are known issues when using ForgeRock products and an HSM with Java 11. If you want to use ForgeRock products with an HSM, you should ensure you upgrade to Java 11.0.6 or later. See SSLHandshakeException or ClassCastException when using an HSM and Java 11 with ForgeRock products for further information. |
| DS 7.x | There is a known issue in DS 7.x, which prevents deployment keys working correctly if you have instances with mixed Java versions and one (or more) of them are using a pre-11.0.6 version of Java: OPENDJ-8506 (Deployment key produces different keys after JVM update). You should always use at least Java 11.0.6 as a result. |
| Platform 6.5.x | There are known issues with using Groovy 2.x with Java 11. See An illegal reflective access operation has occurred when using Java 11 with ForgeRock products for further information. |
| AM 6.5.x | Federation-related pages do not display when using Java 11. See Federation related pages do not display in the admin UI with a java.lang.NoClassDefFoundError: sun/misc/CharacterEncoder error in AM 6.5.x for further information. |
| DS 6.5, 6.5.1 and 6.5.2 | There are known issues when using TLS 1.3 with Java 11. Unless you are using at least DS 6.5.3 and Java 11.0.6, you should disable TLS 1.3 as described in How do I disable TLS 1.3 when running DS 6.5, 6.5.1 or 6.5.2 with Java 11.0.5 and earlier, or Java 1.8.0_272 and later? |
OpenJDK
Identity Platform
| Platform 7.1, 7.2 | Platform 7 | Platform 6.5 | Platform 6 | |
|---|---|---|---|---|
| Access Management | 11 | 11 | 8, 11 | 8 |
| Directory Services | 11, 17 | 11 | 8, 11 | 8, 9 |
| Identity Management | 11 | 11 | 8, 11 | 8 |
| Identity Gateway | 11 | 11 | 8, 11 | 8 |
Agents
| OpenJDK 11 | OpenJDK 8 | |
|---|---|---|
| Java Agents 5.6 and later | Yes | Yes |
| Java Agent 5.5 | -- | Yes |
| Java Agent 5 | -- | Yes |
Web Agents do not have any Java dependencies.
Oracle® JDK
Identity Platform
| Platform 7.1, 7.2 | Platform 7 | Platform 6.5 | Platform 6 | |
|---|---|---|---|---|
| Access Management | 11 | 11 | 8, 11 | 8 |
| Directory Services | 11, 17 | 11 | 8, 11 | 8, 9 |
| Identity Management | 11 | 11 | 8, 11 | 8 |
| Identity Gateway | 11 | 11 | 8 | 8 |
Agents
| Oracle JDK 11 | Oracle JDK 8 | |
|---|---|---|
| Java Agents 5.6 and later | Yes | Yes |
| Java Agent 5.5 | -- | Yes |
| Java Agent 5 | -- | Yes |
Web Agents do not have any Java dependencies.
IBM® Java (Websphere® only)
Note
Only AM and Java Agents have been validated with the IBM Java.
AM
| IBM Java 8 | |
|---|---|
| AM 7.x | -- |
| AM 6.x | Yes |
Java Agents
| IBM Java 8 | |
|---|---|
| Java Agents 5.x | Yes |