Now you can bring down the secured server. java -Djavax.net.ssl.trustStore=/Users/me/vault/ClientTrustStore \ -Djavax.net.ssl.trustStorePassword=secretClientTrustStorePassword \ -Djavax.net.ssl.keyStore=/Users/me/vault/ClientKeyStore \ -Djavax.net.ssl.keyStorePassword=secretClientPassword \ org.apache.derby.drda.NetworkServerControl shutdown -p 8246 \ -user mchrysta -password mchrysta \ -ssl peerAuthentication