For each BE agent you can configure a JMX connector port for monitoring and management. 
To enable JMX update the CDD file and set property be.engine.jmx.connector.port=<portnumber> or update the tra file and add property java.property.be.engine.jmx.connector.port.
By default authentication is disabled for the JMX connection. 
 

All Operating Systems

To enable authentication add below property to the TRA or CDD file.

TRA:
java.property.be.engine.jmx.connector.authenticate=true

CDD:
be.engine.jmx.connector.authenticate=true

The authentication type configured with CDD properties below (add them to the cluster area of the CDD file).
be.auth.type=[file|ldap]

File based authentication:
be.auth.type=file
be.auth.file.location=<locationOfPasswordFile>

See:
https://docs.tibco.com/pub/businessevents-enterprise/6.1.0/doc/html/Default.htm#Administration/Common-Authentication-Properties.htm?TocPath=Administration%257CUser%2520Authentication%257CAuthentication%2520Configuration%257C_____4


LDAP authentication:
be.auth.type=ldap
See:
https://docs.tibco.com/pub/businessevents-enterprise/6.1.0/doc/html/Default.htm#Administration/LDAP-Authentication-Properties.htm?TocPath=Administration%257CUser%2520Authentication%257CAuthentication%2520Configuration%257C_____5

TIBCO BusinessEvents (BE) - How to enable JMX authentication