In section 14.2 of the documentation where it talks about setting up JMX. There are two examples: one for localhost without password and another with passwords, ssl, and remote access.

There is a note about the first example: "This makes Java listen for incoming JMX connections on port 12345 and tells it not to require authentication or SSL." But it would be nice to add here that this only works for localhost even if JMX listens in all the interfaces.

The -Djava.rmi.server.hostname parameter is quite important. And I see only a note about the ssl parameters (important too, but perhaps not so much in the beginning).

Can a note about that parameter be added? for example: "This makes Java listen for incoming JMX connections on port 12345, only for localhost and tells it not to require authentication or SSL. If you want to allow connections in other interface, set the -Djava.rmi.server.hostname parameter to the IP of that interface".