When an RMI connection is established to the broker message server, the broker message server requests a certificate from the client to perform client authentication. The certificate is validated against the View adapter's trust store before proceeding with the connection. If the client does not provide a certificate, or the agent's certificate cannot be validated, the connection is rejected.

When the broker agent is first installed, a self-signed certificate is generated. The broker agent uses this self-signed certificate by default to authenticate to the View adapter. Because this certificate is generated dynamically, you must manually pair the View adapter and broker agent before the broker agent can communicate with the View adapter. For more information, see Certificate Pairing.