diff --git a/pipelines/build/common/openjdk_build_pipeline.groovy b/pipelines/build/common/openjdk_build_pipeline.groovy
index 04010a1e6..e547e71dd 100644
--- a/pipelines/build/common/openjdk_build_pipeline.groovy
+++ b/pipelines/build/common/openjdk_build_pipeline.groovy
@@ -748,11 +748,12 @@ class Build {
     /*
     Run the Sign downstream job. We run this job on windows and jdk8 hotspot & jdk13 mac builds.
     The job code signs and notarizes the binaries so they can run on these operating systems without encountering issues.
+    tarball signing only required for jdk8u, as jdk11+ is signed dynamically during the build.
     */
     def sign(VersionInfo versionInfo) {
         // Sign and archive jobs if needed
         if (
-            buildConfig.TARGET_OS == 'windows' || (buildConfig.TARGET_OS == 'mac')
+            (buildConfig.TARGET_OS == 'windows' || (buildConfig.TARGET_OS == 'mac') && buildConfig.JAVA_TO_BUILD == 'jdk8u')
         ) {
             context.stage('sign zip/tgz') {
                 def filter = ''