3.3. Enable password encryption for non-fabric environment in A-MQ

Red Hat JBoss A-MQ provides a set of options for enabling password encryption. To protect the passwords, you must set the file permissions of the users.properties file so that it can be read only by administrators. To provide additional protection, you can also encrypt the stored passwords using a message digest algorithm.
To enable the password encryption feature using the MD algorithm, follow the below instructions:
  • Edit the InstallDir/etc/org.apache.karaf.jaas.cfg file.
  • For example, the following settings would enable basic encryption using the MD5 message digest algorithm: 
    	encryption.enabled = true
	encryption.name = basic
	encryption.prefix = {CRYPT}
	encryption.suffix = {CRYPT}
	encryption.algorithm = MD5
	encryption.encoding = hexadecimal
Note
The encryption settings in the org.apache.karaf.jaas.cfg file are applied only to the default karaf realm in a standalone container.
See Also: section "Using Encrypted Property Placeholders" in "Security Guide"