The service provider will manage and deploy trusted SSL certificates on all infrastructure components (vCenter Server, Horizon, vSphere, Identity Manager). NSX will provide micro-segmentation, managed by the tenant. 2-Factor authentication will be used for user access to Horizon.