This is the title of an excellent new blog entry from my teammate Luis-Miguel Alventosa. It's an exhaustive description of the principal options that are open to you to configure the security of RMI connectors for JMX agents. http://blogs.sun.com/lmalventosa/entry/jmx_authentication_authorization