Chap. 19. Encrypting the Keystore Password in a Tomcat Connector
rename all $PROFILES to $PROFILE just to be consistent across all the guide

Sect. 19.1. Medium Security Usecase
Last note is refering to id that runs JBoss "If you see this error, remember the keystore file should be writable by the id that is running JBoss Enterprise Application Platform.".
I would change it to following: "If you see this error, remember the keystore file should be writable by the user id that is running JBoss Enterprise Application Platform.".