.. /*
    * This file is part of the SavaPage project <https://www.savapage.org>.
    * Copyright (c) 2026 Datraverse B.V.
    * Author: Rijk Ravestein.
    *
    * SPDX-FileCopyrightText: (c) 2020 Datraverse B.V. <info@datraverse.com>
    * SPDX-License-Identifier: CC-BY-SA-4.0
    *
    * For more information, please contact Datraverse B.V. at this
    * address: info@datraverse.com
    */

.. _ch-security-jmx:

Secured JMX Connection
----------------------

During the install process, |PRODUCT_NAME| generates a dedicated
self-signed key and certificate for securing JMX connections with SSL.
The generated Java keystore is:
``/opt/savapage/server/data/jmxremote.ks`` with password ``savapage``. Access
to this file is restricted to the ``savapage`` user.

The JMX password for the ``admin`` user is held in
``/opt/savapage/server/data/jmxremote.password``. Java needs the
password to be provided in plain text, so access to this file is
restricted to the ``savapage`` user.

The initial password is a random string generated by the installation
process. It needs to be changed in the Admin Web App as described in
:ref:`JMX Agent <ch-webapp-admin-options-advanced-jmx-agent>`.

.. note::

   The default |PRODUCT_NAME| JMX port is |PROD_IP_PORT_JMX|. This can be
   changed by editing the file: ``/opt/savapage/server/data/jmxremote.properties``

   You need to :ref:`restart <app-tools-start-stop>` |PRODUCT_NAME| for this
   change to take effect.