Sending a clear text secret is not secure the extreme

Sending a clear text secret is not secure. The eXtreme Scale security infrastructure
provides a SecureTokenManager plug-in to allow the server to secure this secret
before sending it. You can choose how you implement the secure operation.
WebSphere eXtreme Scale provides an implementation, in which the secure
operation is implemented to encrypt and sign the secret.
Java Management Extensions (JMX) security in a dynamic
deployment topology
JMX MBean security is supported in all versions of eXtreme Scale. Clients of
catalog server MBeans and container server MBeans can be authenticated, and
50
IBM WebSphere eXtreme Scale: Administration Guide April 2012

access to MBean operations can be enforced.
Local eXtreme Scale security
Local eXtreme Scale security is different from the distributed eXtreme Scale model
because the application directly instantiates and uses an ObjectGrid instance. Your
application and eXtreme Scale instances are in the same Java virtual machine
(JVM). Because no client-server concept exists in this model, authentication is not
supported. Your applications must manage their own authentication, and then pass
the authenticated Subject object to the eXtreme Scale. However, the authorization
mechanism that is used for the local eXtreme Scale programming model is the
same as what is used for the client-server model.
Configuration and programming
For more information about configuring and programming for security, see
“Security integration with external providers” on page 503 and Security API.
Planning for installation
Before you install the product, you must consider software and hardware
requirements and Java environment settings.
Hardware and software requirements
Browse an overview of hardware and operating system requirements. Although
you are not required to use a specific level of hardware or operating system for
WebSphere eXtreme Scale, formally supported hardware and software options are
available on the Systems Requirements page of the product support site. If a
conflict exists between the information center and the System Requirements page,
the information at the website takes precedence. Prerequisite information in the
information center is provided as a convenience only.
See the System Requirements page for the official set of hardware and software
requirements.
You are not required to install and deploy eXtreme Scale on a specific level of
operating system. Each Java Platform, Standard Edition (Java SE) and Java
Platform, Enterprise Edition (Java EE ) installation requires different operating
system levels or fixes.
You can install and deploy the product in Java EE and Java SE environments. You
can also bundle the client component with Java EE applications directly without
integrating with WebSphere Application Server. WebSphere eXtreme Scale
supportsJava SE 5 or later and WebSphere Application Server Version 6.1 and later.