To administer security realms via the Geronimo Administration Console, the Security Realms portlet is available on the Console Navigation menu on the left hand side. This portlet allows you to add a new security realm or edit an existing one.

To remove realms via the Geronimo Administration Console, click the System Modules link on the Console Navigation menu to access the System Modules portlet. From this portlet you can stop, start and uninstall the available security realms as well as other system moudules displayed. You can also use the command line option with the Deployer tool to remove realms.

When you create a new realm you will have to choose from the following realm types available:

• Certificate Properties File Realm
• Database (SQL) Realm
• LDAP Realm
• Properties File Realm

Other than the four available options which you can choose from Administration Console, you can also create your custom realm type when none of the above fits your business needs. This requires creating your own implementation of class org.apache.geronimo.security.realm.providers, which implements the javax.security.auth.spi.LoginModule interface.

If you defined your own security realm and plan to use it within your application, you must define a dependency to the security realm in the deployment plan file.