# Securing Talend Runtime after installation

Available in...

* Cloud API Services Platform
* Cloud Data Fabric

To secure your Talend Runtime installation, it is recommended to perform the following actions.

Talend Cloud users must install Talend Runtime and the Remote Engine on the same machine. Remote communications are not supported.

* Change the default Talend Runtime access username and password in the <RuntimeInstallation>/container/etc/user.properties file.
* Limit the Services to be only accessible as localhost.

  To do this, open the file <RuntimeInstallation>/container/etc/org.ops4j.pax.web.cfg and add the property
  ```
  org.ops4j.pax.web.listening.addresses=127.0.0.1
  ```
* Follow [this procedure](https://help.qlik.com/talend/en-US/remote-engine-user-guide-linux/Cloud/connect-remote-engine-to-talend-runtime) to configure Talend Remote Engine to use the Talend Runtime access credentials.
* Restricting JMX to accept only local connections, via localhost.

  To do this, open the file <RuntimeInstallation>/container/etc/custom/properties and set this property.
  ```
  ORG_APACHE_KARAF_MANAGEMENT_RMISERVERHOST=127.0.0.1
  ```