Enabling and Disabling the Security Manager

The security manager is disabled in the developer and cluster profiles and enabled in the enterprise profile by default.

In a production environment, you may be able to safely disable the security manager if all of the following are true:

• Performance is critical

• Deployment to the production server is carefully controlled

• Only trusted applications are deployed

• Applications don't need policy enforcement

Disabling the security manager may improve performance significantly for some types of applications. To disable the security manager, do one of the following:

• To use the Admin Console, open the Security component under the relevant configuration, and uncheck the Security Manager Enabled box. Then restart the server. For details, click the Help button in the Admin Console.

• Use the following asadmin delete-jvm-options command, then restart the server:

  asadmin delete-jvm-options --user adminuser -Djava.security.manager

  To re-enable the security manager, use the corresponding create-jvm-options command. For more information about the create-jvm-options and asadmin delete-jvm-options commands, see the Sun GlassFish Enterprise Server 2.1 Reference Manual.