6.4
Table Of Contents
- VMware vRealize Operations for Horizon Security
- Contents
- VMware vRealize Operations for Horizon Security
- Managing RMI Communication in vRealize Operations for Horizon
- Changing the Default TLS Configuration in vRealize Operations for Horizon
- Managing Authentication in vRealize Operations for Horizon
- Index
Managing RMI Communication in
vRealize Operations for Horizon 2
The vRealize Operations for Horizon components communicate by using Remote Method Invocation (RMI).
The Horizon adapter exposes RMI services that can be called by an external client. The Horizon adapter acts
as a server and the broker and desktop agents act as clients. You can change the default ports for these RMI
services.
For detailed descriptions of the vRealize Operations for Horizon components, see the
VMware vRealize Operations for Horizon Installation document.
This chapter includes the following topics:
n
“RMI Services,” on page 7
n
“Default Ports for RMI Services,” on page 8
n
“Changing the Default RMI Service Ports,” on page 9
n
“RMI Considerations for Remote Collector Use,” on page 10
RMI Services
The Horizon adapter exposes the following RMI services.
RMI registry service
The broker and desktop agents initially connect to the RMI registry service
and request the address of a specic RMI server. Because the RMI registry
service is used only for lookup and no sensitive data is transmied to it, it
does not use an encrypted channel.
Desktop message
server
The desktop agents connect to the desktop message server and use it to send
desktop performance data to the Horizon adapter. The desktop message
server uses an SSL/TLS channel to encrypt the data that is sent from the
desktop agents.
Broker message server
The broker agent connects to the broker message server and uses it for
sending Horizon inventory information to the Horizon adapter. The broker
message server uses an SSL/TLS channel to encrypt the data that is sent from
the broker agent.
Certificate management
server
The broker agent connects to the certicate management server during the
certicate pairing process. The certicate management server does not use an
encrypted channel. Certicates are encrypted by using the server key during
the certicate pairing process. For information, see “Certicate Pairing,” on
page 21.
VMware, Inc. 7