Configure secure JMX connection to the Liberty profile

1. Edit server.xml

2. Create a REST connector...

   <featureManager>
        <feature>restConnector-1.0</feature>
   </featureManager>

   The restConnector-1.0 feature includes ssl-1.0.

3. Configure SSL certificates.

4. Configure a user or group to the administrator role.

5. Access the REST connector.

   We can access a Liberty profile REST connector from...

   • A Java client
   • Directly through an HTTPS call

   A Java client uses the client-side of the connector, in...

   wlp/clients/restConnector.jar

   ...and implements the interface...

   javax.management.MBeanServerConnection

   Any programming language that can make HTTPS calls, including C++, JavaScript, curl, Ruby, and Perl, can use the REST APIs. The REST APIs contain endpoints for...

   • Management (JMX)
   • file transfer
   • collective routing
   • collective deployment

   Access the REST connector from a JMX client application or using the jConsole tool provided in the Java SDK. Use -J flags to pass the system properties as Java options, and set the class path to include the connector class files. The connector class files are packed in...

   clients/restConnector.jar

   To use jConsole with an SSL configuration:

   jconsole -J-Djava.class.path=%JAVA_HOME%/lib/jconsole.jar;%JAVA_HOME%/lib/tools.jar;%WLP_HOME%/clients/restConnector.jar
            -J-Djavax.net.ssl.trustStore=key.jks 
            -J-Djavax.net.ssl.trustStorePassword=Liberty 
            -J-Djavax.net.ssl.trustStoreType=jks
   

   After the jConsole starts, select Remote Process, and enter the JMX service URL:

   service:jmx:rest://<host>:<port>/IBMJMXConnectorREST

   The port number is the HTTPS port. Also provide the user name and password.

   Use HTTPS calls to access REST connectors...

   1. Open a browser at...
      https://<host>:<port>/IBMJMXConnectorREST/api

      ...and enter the administrative credentials specified in step 3.

   2. Examine the available REST APIs. Each item has a description of its behavior, input, output, query parameters, and header.

   We can specify some JMX REST connection options as system properties. See JMX REST connector settings.

Subtopics

• Mapping the administrator role
• Develop a JMX Java client
• JMX REST connector settings

Parent topic: Access local and JMX REST connectors

Parent topic: Secure the Liberty profile and its applications

Tasks:

Generating collective controller SSL keys