Configure JMX for Ranger KMS Service

You can add the configuration parameters in Ambari to enable JMX monitoring for Ranger KMS components.

Steps to Configure JMX

In the ODP Ambari UI, navigate to Ranger KMS > Configs > Advanced.
In the Advanced tab, navigate to Advanced kms-env > kms-env-template.
Add the following configuration to the template to enable JMX for Ranger KMS.

Update the service configuration template with the appropriate JMX settings. Provide valid values for all placeholders (< >) for each Ranger component.

Configure JMX Without Security

Bash
    
 
export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"
Copy

JMX with Basic Authentication

Bash
    
 
export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"
Copy

JMX with Basic Authentication and SSL

Bash
    
 
export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=true -Dcom.sun.management.jmxremote.registry.ssl=true -Djavax.net.ssl.keyStore=</path/to/keystore.jks/file> -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Djavax.net.ssl.keyStorePassword=<Keystore Password> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Djavax.net.ssl.trustStore=</path/to/truststore.jks/file> -Djavax.net.ssl.trustStorePassword=<Truststore Password> -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"
Copy

Save the configurations.
Restart the Ranger KMS service.

Last updated on

Was this page helpful?