Acceldata
 Pulse
Search documentation… ⌘K

Configure JMX for Ranger KMS Service

You can add the configuration parameters in Ambari to enable JMX monitoring for Ranger KMS components.

Steps to Configure JMX

  1. In the ODP Ambari UI, navigate to Ranger KMS > Configs > Advanced.
  2. In the Advanced tab, navigate to Advanced kms-env > kms-env-template.
  3. Add the following configuration to the template to enable JMX for Ranger KMS.

Update the service configuration template with the appropriate JMX settings. Provide valid values for all placeholders (< >) for each Ranger component.

Configure JMX Without Security

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"
JMX with Basic Authentication

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"
JMX with Basic Authentication and SSL

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=true -Dcom.sun.management.jmxremote.registry.ssl=true -Djavax.net.ssl.keyStore=</path/to/keystore.jks/file> -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Djavax.net.ssl.keyStorePassword=<Keystore Password> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Djavax.net.ssl.trustStore=</path/to/truststore.jks/file> -Djavax.net.ssl.trustStorePassword=<Truststore Password> -Dcom.sun.management.jmxremote.port=<Ranger KMS JMX Port>"
  1. Save the configurations.
  2. Restart the Ranger KMS service.