Java Security Manager Not Supported with JDK 11+ (Policy Keystore Scenario)

[Amaan0069]

Description

Documentation needs to be updated to clarify behavior of Java Security Manager with newer JDK versions.

When Java Security Manager is enabled together with a policy keystore on JDK 11 and above, TLS connections may fail due to underlying JDK security provider behavior changes.

Since Java Security Manager is:

Deprecated starting from JDK 17

Not supported in newer Java versions (including JDK 21 direction)

This setup should no longer be considered supported.

Suggested Fix

Add clarification that:

• Java Security Manager with policy keystore is not supported on JDK 11+

• Customers should use JDK 21 (or supported latest JDK) without Security Manager

• Security Manager based sandboxing is no longer recommended for modern deployments

Recommendation

• Use supported JDK versions (e.g., JDK 21) and modern security mechanisms instead of Java Security Manager.

Version(s)

4.3.0