...

Disable non-secure JMX server

1. Because the JMX server is not started by default, you have to disable the To disable non-secure JMX connector first before starting jmx-security module. To achieve thisserver, stop the Geronimo server if it has been started, and modify the config.xml file in the <Geronimo_HOME>/var/config directory, where <Geronimo_HOME> is the installation directory of your Geronimo server.
2. Exclude the following items from the modules pre-configured to get started by adding load="false" to the elements:

   No Format
   <gbean name="JMXService" load="false"> ... <module name="org.apache.geronimo.configs/clustering//car" load="false"> ... <module name="org.apache.geronimo.configs/tomcat6-clustering-builder-wadi//car" load="false">

...