Securing Broker Command-Line Utilities
When basic authentication or SSL authorization is used, most Broker command-line utilities must present a valid basic authentication identity or SSL identity before connecting (only server_config, server_conf_restore, and broker_start do not require an identity).
To simplify administration using SSL, it is recommended that you use the same keystore, truststore, and DN that you use for the Broker user interface.