You can manually upgrade the Java Runtime Environment (JRE) for the Commvault software.
Symptoms
The JRE that was deployed by Commvault is not the most recent version.
The JRE that was deployed by Commvault is vulnerable to common vulnerabilities and exposures.
You are required to upgrade the JRE.
Resolution
The Commvault software is deployed with a long term support release of the JRE. If a newer version of the JRE than the one deployed by the Commvault installer is required, you can manually upgrade it using the procedure described below.
Notes
Manually upgrading the JRE is supported only for SP16 and more recent service packs/feature releases.
Commvault performs comprehensive testing of our software using the JRE versions that we deploy with the software. The JRE is a third-party product, and while security patch updates are not supposed to affect compatibility, we cannot guarantee that all Commvault components will continue to work properly if you manually upgrade the JRE. Therefore, you should thoroughly test the Commvault software before deploying JRE changes in a production environment.
If we suspect that a manually upgraded JRE version is responsible for an issue that is reported to Commvault Support, the upgrade may need to be reverted for troubleshooting purposes.
In Feature Release 20 and more recent versions, the Commvault installer has been improved so that it will no longer overwrite a manually upgraded JRE, unless necessary. If the installer is deploying the JRE older than the version that was manually deployed, the installer will leave the manually upgraded version in place. As a result, you will not require to repeat the manual JRE upgrade process after installing the latest updates in Feature Release 20 and more recent versions.
Procedure
Identify the JRE version to be installed.
You must only upgrade to a more recent security or patch version of the currently installed JRE. Do not upgrade to a newer minor or major version, because that is very likely to cause breakages. For example, if JRE 11.0.1 is installed, you can upgrade to 11.0.5, but not to 11.1.0 or 12.0.0.
Download the OpenJDK file as follows:
• Windows: Download the ZIP file. Do not download an MSI file.
• UNIX or Linux: Download the tar.gz file.
On the system where you plan to apply the upgrade, stop Commvault services.
Back up and then remove all contents of the current Commvault JRE folder, located at commvault_contentstore_installation_folder\jre.
Extract the contents of the ZIP or tar.gz file to a temporary location, and then move or copy the new JRE contents into the (now empty) Commvault JRE folder.
Verify that subfolders such as \bin and \lib are directly under the Commvault JRE folder.
Start Commvault services.
If any issues are encountered, restore the original version of the JRE that you backed up in Step 5, above, or use the Commvault install media to perform a repair operation.
