# Restricting Talend Runtime remote access with Talend Remote Engine

Available in...

* Cloud API Services Platform
* Cloud Data Fabric

For security reasons, when running a Talend Runtime connected to a Remote Engine, it is recommended to restrict JMX access and SSH access to localhost.

## Procedure

1. Edit the <RuntimeContainerPath>/etc/org.apache.karaf.shell.cfg file and set the following values.
   ```
   sshHost = 127.0.0.1
   ```
2. Edit the <RuntimeContainerPath>/etc/org.apache.karaf.management.cfg file and set the following values.
   ```
   rmiRegistryHost = 127.0.0.1
   rmiServerHost = 127.0.0.1
   ```

   In Talend Runtime 8.0, these parameters are set by default.