SecuritySettingsUpdateSpecV3

SecuritySettingsUpdateSpecV3
SecuritySettingsUpdateSpecV3

Security settings object to be updated.

JSON Example
{
    "cert_auth_mapping": [
        "x509:<I>%issuer_dn%<S>%subject_dn%<SKI>%subject_key_id%",
        "x509:<I>%issuer_dn%<SR>%serial%"
    ],
    "cert_auth_mapping_control": [
        "CUSTOM",
        "SID"
    ],
    "data_recovery_password_hash": [
        "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"
    ],
    "data_recovery_password_hint": "password hint",
    "message_security_mode": "ENABLED",
    "re_auth_secure_tunnel_after_interruption": true
}
array of string
cert_auth_mapping
Optional

Indicates the certificate authentication mapping, which will be used to validate against (objectClass=user,altSecurityIdentities=) in Active directory.

array of string
cert_auth_mapping_control
Optional

Indicates the type of search for validating the Smart card.

Possible values are : SID, CUSTOM, LEGACY,
array of string
data_recovery_password_hash
Optional

The SHA-256 hash of the (UTF-8) data recovery password.

string
data_recovery_password_hint
Optional

The data recovery password hint. This property has a maximum length of 128 characters.

string
message_security_mode
Required

Determines if signing and verification of the JMS messages passed between Horizon components takes place.

  • DISABLED: Message security mode is disabled.
  • ENABLED: Message security mode is enabled. Unsigned messages are rejected by Horizon components.
  • ENHANCED: Message Security mode is Enhanced. Message signing and validation is performed based on the current Security Level and desktop Message Security mode.
  • MIXED: Message security mode is enabled but not enforced.
Possible values are : DISABLED, ENABLED, ENHANCED, MIXED,
boolean
re_auth_secure_tunnel_after_interruption
Optional

Determines if user credentials must be re-authenticated after a network interruption when Horizon clients use secure tunnel connections to Horizon resources. When you select this setting, if a secure tunnel connection ends during a session, Horizon Client requires the user to re-authenticate before reconnecting.