JMX connection with authentication and SSL - JMX connection with authentication and SSL - Alfresco - Alfresco Sync Service - Alfresco/Alfresco-Sync-Service/3.0/Alfresco-Sync-Service/Alfresco-Sync-Service/Configure/Connect-to-Sync-Service-through-JMX/JMX-connection-with-authentication-and-SSL - 3.0

Alfresco Sync Service
Platform
Alfresco
Product
Alfresco Sync Service
Release
3.0
ft:lastPublication
2026-05-06T19:49:28.818000
ft:locale
en-US
ArchiveStatus
Archived

The out-of-the-box Sync Service provides keystore (sync.jks) and truststore (sync.truststore). The password for the keystore and truststore for the default installation is specified in the applicationConnectors section of the config.yml file:

server:
    applicationConnectors:
         keyStorePassword:

The keystore contains a private key and a self-signed certificate for the Sync Service. The truststore contains the self-signed certificate exported from the keystore to create a trust relationship between the Sync Service and itself. In production systems, the truststore usually contains only certificates that are trusted and signed by certificate authorities (CA).

Note

For production systems, it's strongly advised that you use your own SSL key and a certificate that's signed by a certificate authority.

  1. Start the Sync Service by enabling SSL and pass on the path, password, and the store type to the keystore and truststore:

    -Dcom.sun.management.jmxremote.ssl=true -Djavax.net.ssl.keyStore=/path/to/keystore
-Djavax.net.ssl.keyStorePassword=<password> -Djavax.net.ssl.keyStoreType=<type>
-Djavax.net.ssl.trustStore=/path/to/truststore -Djavax.net.ssl.trustStoreType=<type>
-Djavax.net.ssl.trustStorePassword=<password>

    For example:

    cd <installLocation>/service-sync

    java -Xmx2G -Dcom.sun.management.jmxremote=true -Djava.rmi.server.hostname=34.253.209.238
-Dcom.sun.management.jmxremote.port=50800 -Dcom.sun.management.jmxremote.rmi.port=50801
-Dcom.sun.management.jmxremote.authenticate=true
-Dcom.sun.management.jmxremote.password.file=/path/to/jmx.password -Dcom.sun.management.jmxremote.ssl=true
-Djavax.net.ssl.keyStore=/path/to/sync.jks -Djavax.net.ssl.keyStorePassword=<password>
-Djavax.net.ssl.keyStoreType=JCEKS -Djavax.net.ssl.trustStore=/path/to/sync.truststore
-Djavax.net.ssl.trustStoreType=JCEKS -Djavax.net.ssl.trustStorePassword=<password>  
-Djava.io.tmpdir=/var/tmp/dsync -cp postgresql.jar:service-sync-3.0.x.jar org.alfresco.service.sync.dropwizard.SyncService
server config.yml

    Note

    Replace service-sync-3.0.x.jar with your exact version.

  2. Copy the Sync Service truststore into your local machine or export the Sync Service certificate into a new truststore. See the example steps in How to export and import SSL certificate.

  3. Start JConsole:

    jconsole -J-Djavax.net.ssl.trustStore=sync.truststore -J-Djavax.net.ssl.trustStoreType=JCEKS -J-Djavax.net.ssl.trustStorePassword=<password>

  4. Select Remote Process and enter the Sync Service IP and com.sun.management.jmxremote.port valuevalue, user name, and password, as in the earlier example.