title: JBoss management via SSL
body: <p>I have a problem with my JBoss AS 7.1.1 after I configured it to use ssl for the management interface.</p>
  
  <p>I followed <a href="https://community.jboss.org/wiki/SecuringAdministrationConsoleWithHttps" rel="nofollow">this guide</a> to secure the admin console. This worked.</p>
  
  <p>But now I realized that the native management interface does not work anymore.<br />
  When I start my JBoss in Eclipse via the JBoss Tools I get lots of these error messages:</p>
  
  <pre><code> ERROR [org.jboss.remoting.remote.connection] (Remoting "myhost:MANAGEMENT" read-1) JBREM000200: Remote connection failed: javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
  </code></pre>
  
  <p>I have the following configuration in the <code>standalone.xml</code>:</p>
  
  <pre><code> &lt;management&gt;
      &lt;security-realms&gt;
          &lt;security-realm name="ManagementRealm"&gt;
              &lt;server-identities&gt;
                  &lt;ssl&gt;
                      &lt;keystore path="my.keystore" relative-to="jboss.server.config.dir" password="xxPASSxx"/&gt;
                  &lt;/ssl&gt;
              &lt;/server-identities&gt;
              &lt;authentication&gt;
                  &lt;properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/&gt;
              &lt;/authentication&gt;
          &lt;/security-realm&gt;
          ...
      &lt;/security-realms&gt;
      &lt;management-interfaces&gt;
          &lt;native-interface security-realm="ManagementRealm"&gt;
              &lt;socket-binding native="management-native"/&gt;
          &lt;/native-interface&gt;
          &lt;http-interface security-realm="ManagementRealm"&gt;
              &lt;socket-binding https="management-https"/&gt;
          &lt;/http-interface&gt;
      &lt;/management-interfaces&gt;
  &lt;/management&gt;
  
  &lt;interfaces&gt;
      &lt;interface name="management"&gt;
          &lt;any-address/&gt;
      &lt;/interface&gt;
      ...
  &lt;/interfaces&gt;
  
  &lt;socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}"&gt;
      &lt;socket-binding name="management-native" interface="management" port="${jboss.management.native.port:9999}"/&gt;
      &lt;socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9443}"/&gt;
      &lt;socket-binding name="ajp" port="8009"/&gt;
      &lt;socket-binding name="http" port="8080"/&gt;
      &lt;socket-binding name="https" port="8443"/&gt;
      &lt;socket-binding name="osgi-http" interface="management" port="8090"/&gt;
      &lt;socket-binding name="remoting" port="4447"/&gt;
      &lt;socket-binding name="txn-recovery-environment" port="4712"/&gt;
      &lt;socket-binding name="txn-status-manager" port="4713"/&gt;
      &lt;socket-binding name="messaging" port="5445"/&gt;
      &lt;socket-binding name="messaging-throughput" port="5455"/&gt;
      &lt;outbound-socket-binding name="mail-smtp"&gt;
          &lt;remote-destination host="localhost" port="25"/&gt;
      &lt;/outbound-socket-binding&gt;
  &lt;/socket-binding-group&gt;
  </code></pre>
  
  <p>What did I miss?</p>