The whole OVM Infrastructure, including Oracle VM Manager, Oracle Enterprise Manager 13c Cloud Control and Oracle VM Servers are secure by default due to the usage of SSL encryption and Certificate Based Authentication. More info on: http://docs.oracle.com/cd/E73210_01/EMSEC/toc.htm and http://docs.oracle.com/cd/E64076_01/E64084/html/index.html