Zulu is a 100% open source build of OpenJDK, and is equivalent in features and performance with Oracle HotSpot. In rare cases, there is a variance between what is included in OpenJDK and Oracle’s proprietary JVM. Azul has developed optional add-on packages for Zulu that help resolve these issues. Note: while the Zulu Commercial Compatibility Kit and Cryptography Extension Kit are available for free download and redistribution, they may contain software that is not 100% open source.

Zulu Commercial Compatibility Kit (CCK)

The Commercial Compatibility Kit (CCK) for Zulu contains additional functionality that is not included in in the OpenJDK source, but which will help ensure compatibility in applications that take advantage of specific additional features that Oracle bundles into HotSpot. The CCK is free and can be added easily to Zulu as part of your normal upgrade or update process. Simply choose and download the CCK version that matches your operating system and Zulu installer type (for example zip or rpm). The CCK contains the Lucida font family from Monotype™. Note: incorporate the content of this page: http://www.azul.com/products/zulu/cck-downloads

Zulu Cryptography Extension Kit (CEK)

The Cryptography Extension Kit (CEK) for Zulu contains additional functionality that is not included in the OpenJDK source, but which will help ensure compatibility for applications requiring higher than 128-bit key lengths for encryption. It is the Zulu equivalent of the Java Cryptography Extension, or JCE, distribution for the Oracle JDK. The Zulu CEK is free and can be added easily to any Java upgrade or update process. Review the terms of use, then download and apply the CEK to your installed Zulu file set. The CEK supports any version of Zulu regardless of base OS or Java version.

Download Zulu® and Zulu Enterprise Commercial Compatibility Kit

Please review the CCK Terms of Use. By downloading the CCK you are agreeing to these terms of use and acknowledging that you will comply with these Terms of Use when applying the CCK to your Zulu deployments.

To make use of the CCK, first download Zulu, deploy on Linux, Windows, Mac and Cloud environments (as always) then choose your free or subscription-based (Zulu Enterprise) support options. Then choose the CCK version below that matches both your operating system and installer (this is very important). An online version of the Zulu documentation is available here (for all platforms) and Zulu Commercial Compatibility Kit documentation is available here.

Download Zulu® and Zulu Enterprise Cryptography Extension Kit

The Zulu Cryptography Extension Kit (“Zulu CEK”) provides pluggable policy JAR files to set the effective cryptographic level for the whole JDK/JRE. Zulu ships with strong (128 bit) encryption, the standard level for OpenJDK. The Zulu CEK provides an upgrade to ‘unlimited’ key sizes. The Zulu CEK consists of one file named ZuluJCEPolicies.zip and is independent of platform and Java level, so it can be applied to any Zulu installed set.

Some countries have import control restrictions on encryption strength. The version of the Zulu encryption policy files that are shipped standard with Zulu downloads is “strong” but key length is limited.  This Zulu CEK downloadable add-on provides “unlimited strength” policies which contain no restrictions on cryptographic strength.

The Zulu CEK download file does not contain any encryption functionality by itself. All encryption providers and functionality for each Java level is already provided within Zulu’s regular JDK and JRE packages. You will need to have Zulu installed to deploy and use the Zulu CEK.

Your use of the Zulu CEK and its unlimited strength levels must adhere to your local laws, and you should seek
legal counsel to precisely determine your own regional laws and limits in effect.

To download the Zulu CEK, you must first acknowledge its Terms of Use (reference below). After download, review the supplied README.txt file for instructions on applying the Zulu CEK.

License and Terms

This download is part of the Zulu product and is governed by same License and Terms notices. The license notice can be found on in the documentation included within the Zulu CEK download.

Download By downloading software from this page, you agree to the terms of use.


The Zulu product, its standard cryptography framework and included encryption functions, and the Zulu CEK, have been reviewed for general US export.

The OpenJDK architecture on which Zulu is based allows cryptographic strength to be configured through the use of policy files. Some countries restrict the import of cryptographic strengths above a certain level. The Zulu CEK policy files in this download extend cryptographic strength to an unlimited level. The 128-bit cipher length in regular OpenJDK exists by default to meet lowest common denominator import controls worldwide, since in certain countries 128-bit strength is the maximum allowed for import. Your use of the Zulu CEK and its unlimited strength levels must adhere to your local laws, and you should seek legal counsel to precisely determine your own regional laws and limits in effect.

Please consult your export/import control counsel or attorney to determine the exact requirements for your jurisdiction.

Now that you’ve downloaded the Zulu CEK, join the Zulu Community!


© Azul Systems, Inc. 2017 All rights reserved.