AWS cloudhsm medium security documentation change

Service: cloudhsm · 2026-05-01 · Security-related medium

File: cloudhsm/latest/userguide/java-library-install_5.md

Summary

Updated supported Java versions and added end-of-support notes for OpenJDK 8/11

Security assessment

Removing support for outdated Java versions (OpenJDK 8/11) addresses potential security risks from unpatched vulnerabilities in EOL software. Explicitly stating last supported SDK versions helps users avoid insecure configurations.

Diff

diff --git a/cloudhsm/latest/userguide/java-library-install_5.md b/cloudhsm/latest/userguide/java-library-install_5.md
index 7a1b637c1..f86674538 100644
--- a//cloudhsm/latest/userguide/java-library-install_5.md
+++ b//cloudhsm/latest/userguide/java-library-install_5.md
@@ -11 +11,10 @@ Step 1: Install the JCE providerStep 2: Provide credentials to the JCE provider
-The JCE provider for AWS CloudHSM Client SDK 5 is compatible with OpenJDK 8, OpenJDK 11, OpenJDK 17, OpenJDK 21, and OpenJDK 25. You can download both from the [OpenJDK website](https://openjdk.java.net/).
+The JCE provider for AWS CloudHSM Client SDK 5 is compatible with OpenJDK 17, OpenJDK 21, and OpenJDK 25. You can download OpenJDK from the [OpenJDK website](https://openjdk.java.net/).
+
+###### Note
+
+  * Client SDK 5.17.0 is the last release to support OpenJDK 8.
+
+  * Client SDK 5.17.1 is the last release to support OpenJDK 11.
+
+
+
@@ -175 +184 @@ Before your Java application can use an HSM, the HSM needs to first authenticate
-**Explicit login** – This method lets you provide AWS CloudHSM credentials directly in the application. It uses the method from the [`AuthProvider`](https://docs.oracle.com/javase/8/docs/api/java/security/AuthProvider.html), where you pass a CU username and password in the pin pattern. For more information, see [Login to an HSM](https://github.com/aws-samples/aws-cloudhsm-jce-examples/blob/sdk5/src/main/java/com/amazonaws/cloudhsm/examples/LoginRunner.java) code example.
+**Explicit login** – This method lets you provide AWS CloudHSM credentials directly in the application. It uses the method from the [`AuthProvider`](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/security/AuthProvider.html), where you pass a CU username and password in the pin pattern. For more information, see [Login to an HSM](https://github.com/aws-samples/aws-cloudhsm-jce-examples/blob/sdk5/src/main/java/com/amazonaws/cloudhsm/examples/LoginRunner.java) code example.