Connecting Jconsole Securely To Application Server - Sun Microsystems GlassFish Enterprise Server 2.1 Administration Manual

Using JConsole
In the Connect to Agent tab of JConsole, enter user name, password, host name and port (8686,
3
by default).
The user name refers to the administration user name and password refers to the
administration password of the domain.
Click Connect.
4
In the JConsole window you will see all your MBeans, VM information etc., in various tabs.
▼

Connecting JConsole Securely to Application Server

This procedure describes how to connect JConsole to Enterprise Server with security enabled
on the JMX Connector. By default, security is enabled on Enterprise Server cluster or enterprise
profiles. Use this procedure if you have security enabled on the developer profile's JMX
Connector.
Install Enterprise Server on the client machine (where JConsole is installed).
1
The only reason you need this is to let JConsole know where the server certificate of the Domain
Administration Server that you trust is located. To obtain that certificate, invoke at least one
remote asadmin command and to do that, you need the local installation of Enterprise Server.
Start the Enterprise Server on appserver.sun.com.
2
Since this is a cluster or enterprise domain, the system JMX Connector server is secure. To
enable security on the developer profile JMX Connector, see the Admin Console online help.
From the local Enterprise Server installation, run install-dir\bin\asadmin list --user admin
3
--secure=true --host appserver.sun.com --port 4848 (where 4848 is the server's
administration port).
Though asadmin list command is chosen for this example, you can run any remote asadmin
command. You are prompted to accept the certificate sent by the DAS of appserver.sun.com.
Press y to accept the certificate sent by the DAS on appserver.sun.com.
4
The server's certificate is stored in a file called .asadmintruststore in your home directory on
the client machine.
Note –
you are running JConsole also on appserver.sun.com.
Let JConsole know the trust store location by using the following JConsole command:
5
JDK-dir\bin\jconsole.exe -J-Djavax.net.ssl.trustStore="C:\Documents and
Settings\user\.asadmintruststore"
212 Sun GlassFish Enterprise Server 2.1 Administration Guide • December 2008
This step is not required if your server machine and client machine is the same. That is, if