By default, Orchestrator restricts JavaScript access to a limited set of Java classes. If you require JavaScript access to a wider range of Java classes, you must set an Orchestrator system property to allow this access.

Allowing the JavaScript engine full access to the Java virtual machine (JVM) presents potential security issues. Malformed or malicious scripts might have access to all of the system components to which the user who runs the Orchestrator server has access. Consequently, by default the Orchestrator JavaScript engine can access only the classes in the java.util.* package.

If you require JavaScript access to classes outside of the java.util.* package, you can list in a configuration file the Java packages to which to allow JavaScript access. You then set the com.vmware.scripting.rhino-class-shutter-file system property to point to this file.


Create a text configuration file to store the list of Java packages to which to allow JavaScript access.

For example, to allow JavaScript access to all the classes in the package and to the java.lang.Object class, you add the following content to the file.*

Save the configuration file with an appropriate name and in an appropriate place.


Navigate to the following folder on the Orchestrator server system.



If you installed Orchestrator with the vCenter Server installer

Go to install_directory\VMware\Infrastructure\Orchestrator\app-server\server\vmo\conf.

If you installed the standalone version of Orchestrator

Go to install_directory\VMware\Orchestrator\app-server\server\vmo\conf.


Open the configuration file in a text editor.


Set the com.vmware.scripting.rhino-class-shutter-file system property by adding the following line to the file.


Save the file.


Restart the Orchestrator server.

The JavaScript engine has access to the Java classes that you specified.