Configure JMX for Ranger KMS Service

You can add the configuration parameters in Ambari to enable JMX monitoring for Ranger KMS components.

---

Steps to Configure JMX

• In the ODP Ambari UI, navigate to Ranger KMS > Configs > Advanced.
• In the Advanced tab, navigate to Advanced kms-env > kms-env-template.
• Add the following configuration to the template to enable JMX for Ranger KMS.

Update the service configuration template with the appropriate JMX settings. Provide valid values for all placeholders (< >) for each Ranger component.

Configure JMX Without Security

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"

JMX with Basic Authentication

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"

JMX with Basic Authentication and SSL

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=true -Dcom.sun.management.jmxremote.registry.ssl=true -Djavax.net.ssl.keyStore=</path/to/keystore.jks/file> -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Djavax.net.ssl.keyStorePassword=<Keystore Password> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Djavax.net.ssl.trustStore=</path/to/truststore.jks/file> -Djavax.net.ssl.trustStorePassword=<Truststore Password> -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"

• Save the configurations.
• Restart the Ranger KMS service.