VMware VCM 5.3 - CONFIGURATION MANAGER SECURITY ENVIRONMENT REQUIREMENTS Configuration page 27

If the managed machine or its local administrator is untrustworthy, there is a risk of loss of confidentiality of the
network authority credentials during a software provisioning operation. This risk can be mitigated in several ways:
1. Do not initiate software provisioning install/remove package operations on an untrustworthy machine. Restrict
provisioning operations to provisioning collections and add/remove source.
2. Assign the least permissions and login rights necessary to the network authority account used with a managed
machine subject to software provisioning install/remove package operations.
3. Assign an individual network authority account using a local administrator credential to an untrustworthy
machine subject to software provisioning install/remove package operations.
vCenter Configuration Manager Security Environment Requirements
TECHNICAL WHITE PAPER / 27