They are related only because they both refer to the same security, which of course refers to that properties file. The JMX Invoker is configured in server/default/deploy/jmx-invoker-service.xml: <interceptors> | <!-- Uncomment to require authenticated users --> | <interceptor code="org.jboss.jmx.connector.invoker.AuthenticationInterceptor" | securityDomain="java:/jaas/jmx-console"/> | You can change the security domian to any other security domain defined in the server/default/conf/login-conf.xml file, or you can set up your own. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4097544#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...