In chapter 5.3. Run JBoss EAP 6 Within the Java Security Manager in Prerequisites there is "Before you following this procedure, you need to write a security policy, using the policytool command which is included with your Java Development Kit (JDK).", but you don't need use policytool, you can simply use any text editor to create this policy file. It should be mentioned there.