
Oracle Java 17 is free under specific terms, but these terms are temporary. This article explains the conditions for Oracle Java 17’s free usage clearly and in depth, outlines what happens when the free support period ends, and describes practical options businesses have to manage Java licensing costs and security risks.
Oracle Java 17 Licensing Overview
Oracle released Java 17 in September 2021 as a Long-Term Support (LTS) version. Unlike previous Java versions, Java 17 introduced the No-Fee Terms and Conditions (NFTC) license, allowing businesses to freely use Java in commercial and production environments—for a limited period.
Here’s what NFTC offers clearly:
- Free Production Use:
Companies can initially deploy Java 17 for commercial applications without paying Oracle licensing fees. - Free Security Updates (Until September 2024):
Oracle will provide quarterly security patches and bug fixes until September 2024, identical to those provided to paying subscribers. - No Immediate Licensing Costs:
Businesses benefit from temporary cost relief and can delay subscribing to Oracle’s paid Java subscriptions.
But there’s a catch:
The free support provided by Oracle under NFTC has a definite endpoint: September 2024.
Read about Oracle Java 8 licensing.
What Happens After September 2024?
Starting in October 2024, Oracle’s policy changed dramatically:
- End of Free Public Updates:
Oracle has stopped publicly releasing security patches and updates for Java 17. - Subscription Requirement:
New Java 17 patches become available only to paying Oracle Java SE subscribers. - Continued Usage Without Patches:
Java 17 doesn’t stop functioning, but using an unpatched version exposes companies to growing security risks over time.
Example Scenario:
A financial institution deploying Java-based banking software might initially rely on Oracle’s free updates until September 2024. After that, staying secure and compliant means subscribing to or adopting an alternative solution to avoid vulnerabilities.
Options Available After Free Support Ends
Organizations using Java 17 have two main strategies to consider once Oracle’s free updates cease:
Option A: Stay on Java 17 Without Updates
In this scenario, businesses continue using Oracle Java 17 but stop receiving new security patches and bug fixes after September 2024.
Advantages:
- No immediate subscription fees or licensing costs.
- No immediate need to migrate applications or invest IT resources into upgrades.
Risks and Disadvantages:
- Increased vulnerability to security breaches over time.
- Regulatory compliance risks (especially for finance, healthcare, or government sectors).
- Auditing or license enforcement exposure from Oracle if found using unlicensed or unsupported versions commercially.
Real-world Example:
A mid-sized e-commerce business stays on Java 17 to delay upgrade costs. Within six months, a severe security vulnerability emerges publicly. Without patches, the business becomes a prime target for attackers, risking customer data and regulatory penalties.
Option B: Upgrade to a Newer Java Version (Java 21 or Beyond)
The recommended solution is upgrading to the next available Long-Term Support (LTS) version, such as Java 21. Java 21 will be released in September 2023 and remain free under the same NFTC license conditions until approximately September 2026.
Advantages:
- Continued free access to Oracle’s security patches.
- Ongoing maintenance and community support.
- No Oracle subscription fees, effectively eliminating licensing costs.
Challenges:
- Requires IT effort, including compatibility testing, migration planning, and deployment.
- Possible compatibility issues with existing applications needing minor adjustments or rewrites.
- Regularly repeating upgrades every few years to remain within the free window.
Real-world Example:
A software development firm proactively upgrades from Java 17 to Java 21. Although it takes about two months to plan, test, and migrate, it remains secure and maintains compliance without paying licensing fees. This strategic approach effectively controls long-term licensing costs.
Oracle Java 17 Security Patches Schedule and Licensing Requirements
Oracle provides quarterly security patches (Critical Patch Updates – CPUs) for Java 17 under the NFTC license:
Java 17 Update Version | Release Date | License Required? | Notes |
---|---|---|---|
Java 17 (Initial Release) | Sep 2021 | No | Initial NFTC public release. |
Java 17.0.1 | Oct 2021 | No | Security patches & bug fixes. |
Java 17.0.2 | Jan 2022 | No | Security patches & updates. |
Java 17.0.3 | Apr 2022 | No | Quarterly security update. |
Java 17.0.4 | Jul 2022 | No | Quarterly security update. |
Java 17.0.5 | Oct 2022 | No | Quarterly security update. |
Java 17.0.6 | Jan 2023 | No | Quarterly security update. |
Java 17.0.7 | Apr 2023 | No | Quarterly security update. |
Java 17.0.8 | Jul 2023 | No | Quarterly security update. |
Java 17.0.9 | Oct 2023 | No | Quarterly security update. |
Java 17.0.10 | Jan 2024 | No | Quarterly security update. |
Java 17.0.11 | Apr 2024 | No | Quarterly security update. |
Java 17.0.12 | Jul 2024 | No (Final Free Update) | Final NFTC free security update. |
Java 17 Updates After Sep 2024 | Oct 2024 onward | Subscription Required | No public updates without subscription. |
Alternative Java Providers After Oracle’s Free Period Ends
If your organization prefers not to upgrade or pay Oracle subscription fees, alternative Java distributions offer viable paths forward:
- OpenJDK:
- Free, open-source builds receiving regular community-driven security patches.
- Widely trusted but typically have shorter support lifecycles.
- Amazon Corretto:
- Free Amazon-supported Java builds with long-term security patches (usually several years).
- Ideal for businesses requiring robust, enterprise-grade support without fees.
- Azul Zulu Builds:
- Free and commercial Java distributions from Azul Systems.
- Commercial options provide enterprise-grade support.
- Eclipse Temurin (Adoptium):
- Free, open-source Java distribution with strong community support and frequent updates.
Practical Example:
A technology startup running Java-based microservices migrates to Amazon Corretto after Oracle’s free updates end. They continue receiving security patches without licensing costs or vendor lock-in.
Read about the Oracle Java licensing changes in 2021.
Conclusion and Recommendations
Oracle Java 17 offers significant cost-saving advantages—temporarily. However, the free usage period ending in September 2024 means companies must make strategic licensing decisions sooner rather than later.
Recommendations for IT decision-makers:
- Map out your Java upgrade strategy.
- Proactively schedule upgrades to newer free versions (like Java 21) to avoid licensing fees.
- Alternative Java distributions (OpenJDK, Amazon Corretto) are long-term sustainable solutions.
Planning and managing your Java roadmap keeps your business secure, compliant, and cost-effective.