---
title: Java updates
description: Security updates are regularly released for the Java runtime environment. Plan to deploy Java security updates to systems where you run DS software:
component: pingds
version: 8.1
page_id: pingds:security-guide:java
canonical_url: https://docs.pingidentity.com/pingds/8.1/security-guide/java.html
revdate: 2025-10-22T14:42:39Z
keywords: ["Features", "Security", "Setup & Configuration"]
---

# Java updates

Security updates are regularly released for the Java runtime environment. Plan to deploy Java security updates to systems where you run DS software:

1. If the DS server relies on any CA certificates that were added to the Java runtime environment truststore, `$JAVA_HOME/Home/lib/security/cacerts`, for the previous update, add them to the truststore for the update Java runtime environment.

2. Edit the `default.java-home` setting in the `config/java.properties` file to use the new path.

   The setting should reflect the updated Java home:

   ```
   default.java-home=/path/to/updated/java/jre
   ```

   When you set up DS servers, the path to the Java runtime environment is saved in the configuration. The server continues to use that Java version until you change the configuration.

3. Restart the DS server to use the updated Java runtime environment:

   ```console
   $ stop-ds --restart
   ```