...
If however you wish to use a self-signed SSL certificate, then the management console must be provided with an SSL truststore containing a record for the SSL certificate so that it is able to validate it when presented by the broker. This is performed by setting the javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword environment variables when starting the console. This can be done at the command line, or alternatively an example configuration has been made within the console's qpidmc.ini launcher configuration file that may pre-configured in advance for repeated usage.
JConsole Configuration
As with the JMX Management Console above, if the broker is using a self-signed SSL certificate then in order to connect remotely using JConsole, an appropriate trust store must be provided by supplying JConsole with values for the javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword properties at startup.
Additional Information
More information on Java's handling of SSL certificate verification and customizing the keystores can be found in the JSSE Reference Guide .
...