Securing Talend Runtime after installation

To secure your Talend Runtime installation, it is recommended to perform the following actions.

Talend Cloud users must install Talend Runtime and the Remote Engine on the same machine. Remote communications are not supported.

Change the default Talend Runtime access username and password in the <RuntimeInstallation>/container/etc/user.properties file.
Limit the Services to be only accessible as localhost.
To do this, open the file <RuntimeInstallation>/container/etc/org.ops4j.pax.web.cfg and add the property
```
org.ops4j.pax.web.listening.addresses=127.0.0.1
```
Follow this procedure to configure Talend Remote Engine to use the Talend Runtime access credentials.
Restricting JMX to accept only local connections, via localhost.
To do this, open the file <RuntimeInstallation>/container/etc/custom/properties and set this property.
```
ORG_APACHE_KARAF_MANAGEMENT_RMISERVERHOST=127.0.0.1
```

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!