Hi Jaxx, You can write a new login module in the login-config.xml (for SSL Authentication & Authorization) and use it as the securit interceptor defined in jmx-invoker-service.xml. | <interceptors> | <!-- Uncomment to require authenticated users --> | <interceptor code="org.jboss.jmx.connector.invoker.AuthenticationInterceptor" securityDomain="java:/jaas/jmx-rmi-adaptor"/> | <!-- Interceptor that deals with non-serializable results --> | <interceptor code="org.jboss.jmx.connector.invoker.SerializableInterceptor" policyClass="StripModelMBeanInfoPolicy"/> | </interceptors> | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4176573#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...