<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
  <role rolename="manager-gui"/>
  <user username="tomcat" password="encryptedPassword" roles="manager-gui"/>
</tomcat-users>

-Dhawtio.authenticationEnabled=true
-Dhawtio.roles=manager-gui

<Realm className="org.apache.catalina.realm.MemoryRealm" digest="SHA" />

digest.bat -a SHA-256 SecretPassword

<role rolename="manager"/>
<user name="admin"     password="1288a656cfb22e6f703a6f673e9af5c6dfca1896a4175fe021f69c0ba43f7140$1$1f9d7fce69bc80281262e58e679d49996e1a42105f90a0739204953886f36949" roles="manager"/>

set CATALINA_OPTS=-Dhawtio.authenticationEnabled=true -Dhawtio.roles=manager -Dhawtio.authenticationContainerTomcatDigestAlgorithm=SHA-256