The broker and desktop message servers on the Horizon Adapter use certificates to authenticate themselves to agents. The broker agent uses a certificate to authenticate itself to the broker message server, and the desktop agent uses authentication tokens to authenticate itself to the desktop message server.
To increase security, you can replace the default self-signed certificates that the Horizon Adapter and broker agents use. You can also reissue desktop authentication tokens.