6.5

Contents
1
VMware vRealize Operations for Horizon Security 5
2
Managing RMI Communication in vRealize Operations for Horizon 7
RMI Services 7
Default Ports for RMI Services 8
Changing the Default RMI Service Ports 9
RMI Service Port Properties 9
Change the Default RMI Service Ports 9
Update the vRealize Operations Manager Firewall 10
RMI Considerations for Remote Collector Use 10
3
Changing the Default TLS Conguration in vRealize Operations for Horizon 11
Default TLS Protocols and Ciphers 11
TLS Conguration Properties 12
Change the Default TLS Conguration for Servers 12
Change the Default TLS Conguration for Agents 12
4
Managing Authentication in vRealize Operations for Horizon 15
Understanding Authentication for Each Component 15
Horizon Adapter Authentication 15
Broker Agent Authentication 16
Desktop Agent Authentication 16
Certicate and Trust Store Files 16
View Adapter Certicate and Trust Store Files 16
Broker Agent Certicate and Trust Store Files 17
Replacing the Default Certicates 18
Replace the Default Certicate for the View Adapter 18
Replace the Default Certicate for the Broker Agent 19
Certicate Pairing 21
Reissue Horizon Desktop Authentication Tokens 21
SSL/TLS and Authentication-Related Log Messages 21
Index 23
VMware, Inc. 3