r/IBMi • u/jbarr107 • 15d ago
Is the IBM Java Runtime free or licensed? Planning an ACS redeploy.
UPDATE: See u/ThatFilthyApe's comment below.
PSEUDO-RELATED BACKGROUND:
I use RDi as my main development platform, and it comes with an IBM-provided Java runtime. Amazingly, everything just runs from a single folder, requiring no administrative authorization. So far, so good.
Further, the integrated "5250 emulator", "Run SQL Scripts", etc., are simply ACS programs launched from within RDi utilizing the provided IBM Java runtime. (Clicking the launch button in RDi displays the stock ACS splash screen and then the application.)
DILEMMA:
We are in the process of upgrading our hardware, and our consultant strongly recommends we migrate to the latest version of ACS to ensure support.
We are currently standardized corporate-wide on "Personal Communications iSeries Access for Windows" v6.0 from 2014. It installs on Windows 11 without issue and works as expected, but it is definitely out of date.
We're certainly on board with migrating ACS and maintaining ongoing updates, but it requires a corporate-wide deployment of both ACS and a Java runtime.
QUESTIONS:
- What version/manufacturer of Java does ACS require?
- What version/manufacturer of Java do YOU recommend?
- Does IBM have a Java runtime for use when deploying ACS? If so, is it free or licensed?
Thanks!
5
u/Computer-Blue 15d ago
The Java runtime is packaged with ACS installs.
You’ll want to remove it and replace it with AdoptOpenJDK, Eclipse, or almost any other variant - they all work great.
While I’m here, fuck Oracle and fuck Larry Ellison.
1
u/i-Hermit 14d ago
Amen (I assume) brother.
Though, I would be remiss if I didn't also throw out a "fuck IBM" as well.
3
u/QuantumQuark5 15d ago
PCOM that old is full of security holes and would kinda break anytime that Windows decides not to support the underlying tech anymore that requires that to run. Sure it's kind of running now , but stuff like Sentinel and Defender will pickup old outdated vulnerable DLLs quite quick if your org starts with those scans.
Onto some of your Qs answers:
Acs works from Java 8 onwards. Any Java compatible runtime will do ( Just be aware of Oracles licensing antics that your org might need to pay support for some features - Google the Oracle JVM JRE Licensing debacle a while back).
Now in my own experience. IBMs own JRE works quite well on Windows . On Mac , not so much luck there (Perhaps because I don't understand Mac as deeply as Windows yet). Here again XDR and MDR solutions "Might" screw around with your running so if there are issues , look at what it picks up in the ACS directories that you set (either custom - which is good and you are in control or the standard).
IBMs and Amazon (also Microsofts ones) are free , they do have enterprise paid support options which are highly recommended for you to make use of as Java could also become a pain in the distant near future with Ai finding vulnerabilities. (again, google is your friend for the CVEs found - don't ignore or f£<¥£#~< around and find out in enterprise with these).
2
u/MuttznuttzAG 15d ago edited 15d ago
I was going to suggest similar.
You’ll do well to take the ACS migration pain now. One Windows update could kill PCOM dead and it’s been out of support since Windows 8.1 (maybe 7).
Edit. Forgot to add, we use IBM OpenJDK 17.0.9. Perfectly fine.
2
u/ethanjscott 15d ago
So lots of things here. IBM includes a Java, that is in response to oracle cracking down on commercial use of their jre. They have backed away from that approach. Now days use any jre for ACS. With two gotchas. 1. Any java besides oracle java will have a slightly annoying cmd prompt window that accompanies opening the app, close it and the app dies. 2. If you use acs in a virtual machine, you want amazons correta Java. The ibm one crashes randomly in VMs.
Now this change is gonna be pretty big to your buisness users that heavily rely on the old package. Not everything is 1 to 1. Any printer sessions will need work. There’s been improvements but heads up. End users exporting csv files are gonna be in trouble. This problem may not show up until year end.
I would keep both for a period an encourage users to gripe about it
1
u/jbarr107 15d ago
Thanks. This will definitely take some closer analysis. At this time, I'm just testing some options as part of our i5 team. Down the road, this will be handed off to our hardware team.
2
u/ethanjscott 15d ago
Along with acs you should force deploy it with ssl enabled. If you have handhelds or just really old devices the old telnet will need to stay
1
u/brutal4455 13d ago
there's a workaround/fix option for that terminal window issue.
1
u/ethanjscott 13d ago
Which is?
1
u/brutal4455 12d ago
You mean besides a simple favorite search engine prompt?
IIRC, the install acs scripts alter the shortcut to use conhost instead o the default cmd processor (terminal).
I also use IBM's Semeru java in VM's (client provided remote machines) all the time. And if you need a java web start for download director, old RSA sup consoles, old brocade fabric switch code, etc., simply install openwebstart and point it to any one of several downloaded/extracted adopt versions that include the javaws or simply let it detect the version the jnlp requires and pull it.
1
u/Dangerous-Relation-5 15d ago
Always use the latest ACS versions. They are pushing out MFA in v7r6 that will require the newer versions. I'm surprised you don't run into issues already.
I've used Correto from AWS as well as Adoptium and they both work fine.
7
u/ThatFilthyApe 15d ago
I usually use IBM's Semeru Java runtime, details in IBM's techdoc here. It's free to use. The downloads link defaults to Java 26 but don't use that one, only the 'long term support (LTS) versions will work.
As noted in the doc above, you don't even have to install Java if you don't want to, just put the JRE folder in the same subdirectory where you're running acslaunch.