Remote Engine users and passwords
Last updated: 9/9/2026The users authenticate access to the SSH console, the Karaf JMX management layer, and the Karaf console. These access paths delegate to the same JAAS-based security authentication. Keeping the default credential unchanged can be risky for a production environment. For further information on the default credential behaviors, see Changing the default Remote Engine password.
The users.properties file contains one or more lines. Each line defines a user, its password, and the associated roles.
user=password[,role][,role]...After the Remote Engine starts, the password is encrypted. By default, the encryption is based on Jasypt, using the salted SHA-256 algorithm. To modify these settings, edit the <RemoteEngineInstallationDirectory>/etc/org.apache.karaf.jaas.cfg file. For more information, see the Karaf security configuration page.