Technical USPs and advantages - IGEL Technology · Advantages around the UMS – leading Thin...

Technical USPs and advantages

around IGEL´s product portfolio

Product Marketing

2016 Q1

Gerhard Setzmüller


Agenda


► IGEL Operating Systems

– IGEL Universal Desktop (UD)

• Linux v5 (LX)

– Protection against tampering

• Windows Embedded Standard 7 (W7 and W7+)

– IGEL Zero Clients (IZ)

• ARM devices (Citrix, Microsoft)

• x86 devices (Citrix, Microsoft, VMware)

– Universal Desktop Converter 2 (UDC2)


Agenda


► Functional Extensions (optional/additional costs)

– Universal Customization Builder (UCB)

– High Availability Extension (HA)

– Universal MultiDisplay (UMD)

– Shared WorkPlace (SWP)

– Multimedia Codec Pack (MCP)


Agenda


► Integrated Security Features

– VPN solutions

– Kerberos

– USB management

– Single Sign-On

• Smartcard Readers

• Smartcards


Agenda


► 3rd Party Hardware Support and IGEL Options

– 3rd Party Hardware Database

– Connectivity-Foot

– Integrated Smartcard Reader

– VESA mount


Agenda


► Vertical Markets

– Exemplary solutions for dedicated verticals

IGEL Management Software


IGEL Software USPs

► Advantages around the UMS

– leading Thin Client management software solution

– included and delivered with every

IGEL Thin/Zero/Soft Client without additional costs

– uniform UI with standardized look & feel

– quick implementation

– high degree of standardization

– high flexibility relating to 3rd party solutions & customization

= saves money and reduces fixed and variable IT costs


Universal Management Suite

• Unified management

– only one tool to manage all IGEL operating systems

• LX, UDC2, IZ and WES (W7 and W7+)

• manages converted 3rd party devices

– common profiles based on IGEL meta language

• this „meta-translator“ only roll out the required parameters which are

available on the target system

– general and easy to operate user interface

• UMS = local device setup the same awesome UI



• SSL based communication

– each Thin Client that connects to the UMS receives and stores a

public key

• as of now the whole traffic and the communication between the

client and the UMS is based on SSL encryption

• certificate-based encrypted communication

– protects against DDoS attacks

– protects against man-in-the-middle attacks

– HTTPS based communication between

• UMS console (admin client) and UMS server over TCP port 8443



• Basic configuration and rollout without any scripting

– set all parameters without any scripting knowledge or

text file editing

• Linux and Windows

– customization through user friendly and uniform UI with

standardized look & feel

• both in the UMS (profiles) and within the local device setup

across all IGEL OSes

– UD/IZ (LX)

– UDC2

– WES (W7 and W7+)



• UMS Views

– easy Thin Client query through uniform and user friendly

wizard

– combine criterions with operators to achieve best results



• Automatic client configuration

– uses AND/OR logic operators on predefined criterions

– relational operators: not like, like, equal to, greater than, less than

– up to seven criterions to combine• MAC-address, last known IP address, name, network name, product name,

product ID, firmware version, netmask

– combine criterions and operators to complex rule sets

– each rule set can define its own default directory



• UMS Administrator– System configuration backups

– Certificate management

IGEL OSes


IGEL Operating System USP´s

► Advantages around the IGEL operating systems

– management software always included for free (UD/IZ and UDC2)

• centralized management

– hardware warranty up to 5 years without any additional costs

(except UD 9, UD10 and IZ)

– free software updates during product lifecycle and 3 years additional

software maintenance after EOL

– uniform UI with standardized look & feel across OSes

– OS independent, common profiles





Universal Desktop (LX v5)

• IGEL Partitions

– this function allows to turn pre-installed features on or off

• s.a. Citrix Receiver, ThinPrint, and so on…

• similar to Windows Features



• Protection against tampering and extended system security

during the update process

– the update- and boot- mechanism uses a hash value check, whether the

partition has been modified

• if there is a modified critical partition

the device will not boot

• there are two different critical partitions existing on the system

system partition

user partition

• if there is a modified uncritical partition

– the device will boot, but only the affected part will be deactivated and

the scope of function is restricted

• apart from the two critical partitions all other partitions are considered as

uncritical


Universal Management Suite 4

• Fail-Safe firmware update

particularly secure Thin Client management

• firmware updates always finish completely

the device always keeps running

the device always stays bootable

update process without critical phases

critical updates always processed by two phases


Fail-Safe Firmware Update Process

Start Update

Free SpaceFree Space

UD Firmware 2

(Complete)

Free SpaceFree Space

UD Firmware 2

(Incomplete)

UD Firmware 1

If Update failed

Reboot

Update OK

Reboot

Update starts again Start new system

UD Firmware 1 UD Firmware 1

UD Firmware 2

(Complete)

Free Space

(UD Firmware 1)


Universal Desktop

• Benefits of IGEL Partitions

– firmware customization on customer side

• size the firmware down to basic functions

• minimize the lines of active code

• extend the system performance

– flash medium cannot be mounted on any other device

• IGEL uses its own partitioning system

• IGEL partitions are compressed, thus data is obfuscated

• checksums of IGEL partitions avoid loading of modified code

– configuration is written to a dedicated and compressed partition



• Buddy Updates (similar to Microsoft BranchCache)

– Each IGEL Thin/Zero Client, which received a firmware update by the

UMS, can be an update server for the other defined devices on a

dedicated branch network.

Benefits:

– Send a firmware one time to update many clients

– Results in a bandwidth reduction (WAN/LAN)

– Quickly distribute firmware releases in a

WAN environment



• Buddy Update process (similar to Microsoft BranchCache)

Branch Office LAN

Buddy Server

LAN

WAN

Headquarter – Datacenter

Update Server

Buddies

Buddies


Universal Desktop Converter 2

• Converts most of x86 based hardware

– extends the life of old/depreciated desktop hardware

– standardization of desktop operating systems on PCs and thin clients

– enables the step-by-step introduction of SBC and VDI (virtual desktops)

• Centralized remote management

– management software (UMS) included for free

• Based on IGEL Universal Desktop Firmware (Linux v5)

– UD and UDC2 share the same set of features

• Broad range of pre-installed clients for VDI and SBC access

– from Citrix to VMware (more than 15 clients)

• Three different operating modes

– installation on a device (removes previous OS)

– boot UDC from a USB stick

– run UDC in a virtual machine (works with standard hypervisors)


Universal Desktop Converter 2

• Comprehensive hardware- and 3rd party device support

– firmware integrated drivers

• to support broad range of x86-compatible hardware

• detailed driver information available on 3rd party hardware DB

– IGEL supported devices

• Acer: Veriton N260G / N281G / N2110G

• Advantech-DLoG: MTC 6

• DELL / Wyse: C90LE / C90LEW / D10D / D50D / R50L / Z50D

• Fujitsu: Futro S500 / S550 / S550-2 / S700 / S720 / S900 / S920

• HP: t5545 / t5565 / t5630w / t5730 / t5735 / t5745 / t510 / t520 / t610 / t620 / t820

• Lenovo: M32

• Samsung: TC190 / TC240

– drives are added and updated continuously with every FW release


Universal Desktop (WES) (based on Windows Embedded)

• Recognized industry standard

– Windows Embedded Standard 7

• Genuine RDP/RDS support (currently version 8.1)

• WES and Linux share common UMS profiles

– operating system specific parameters are simply ignored if unavailable

• Pre-installed and IGEL verified software components

– smartcard driver, VPN, etc.

• IGEL Partial Update

– firmware customization at customer site

– fully integrated in UCB framework

– optimizes roll out of windows hotfixes and additional software

– saves bandwidth (WAN and LAN)

• no need to deploy a complete system snapshot, delivers only the changed

parts


Universal Desktop (WES) (based on Windows Embedded)

• Embedded Linux management

– manages the WES system in an update or emergency case

– manages the device through the embedded Linux, if it boots not correctly

• File Based Write Filter (FBWF)

– security standard similar to Linux

– the user has the option to deactivate

• enables the Windows OS customization

– install drivers and applications

• Microsoft domain join can be managed completely by the UMS


Zero Clients

• Specialized zero clients – Citrix HDX, RemoteFX or Horizon View

– based on IGEL Linux (x86)

• No typical zero client limitations– updates available, management through UMS, technical support

• Choice between desktop- or appliance mode– very fast and direct boot into the respective VDI session

• Zero Touch deployment– profile based configuration

– reduces the desktop management

• management through the free included IGEL management solution (UMS)

• Future proof, investment protection and software subscription for free – IGEL UD-Upgrade-License

• upgrade path to Universal Desktop environment

• further use of the same hardware


• IGEL is the first and only vendor of Linux based and dedicated

Microsoft RemoteFX hardware platforms worldwide.

IGEL Zero Client IZ2 and IZ3 RFX

RemoteFX

Functional Extensions (optional/additional costs)


Functional Extensions (optional/additional costs)

► General benefits regarding all optional features

– seamless integration into the free included IGEL management software

– customization at customer site

• no depending to the client vendor

– extend the productivity

– enhance the basic functions to an enterprise solution

– uniform UI with standardized look & feel across the OSes



= 1. enables company compliance standards

2. enhances the company security level

3. enhances the efficiency



• Universal Customization Builder (UCB) (optional/additional costs)

– adjusts firmware at costumer site

• generating, packing and rolling out firmware expansion packages

– no need of detailed Shell- or Windows scripting knowledge

– user-friendly GUI with the familiar look and feel of the IGEL UMS

• automatic syntax check

• packs the components to get along with Linux and WES standards

• available for IGEL Universal Desktop

– Linux (Custom Partition)

– WES (Partial Updates)

• reduces the bandwidth:

only deliver a specific part of the firmware, never roll out the whole image

– predefined templates and UCB support trough IGEL


• Firmware customization made easy:

IGEL Custom Partition (LX) and Partial Update (WES)

UCB



• High Availability Extension (HA) (optional UMS extension/additional costs)

– two or several UMS-Server within the network (2+)

• redundancy or scaling

• automatic failover mechanism

– integrated Load Balancer

• independent simultaneous booting processes

• especially developed for larger environments (500+)

• can also be used as a redundant system

– supported database-clusters

• Oracle DB (11g or higher)

• Microsoft SQL Server (2008 or higher)


• Multi display scenarios (up to max. 8 screens) (optional/ UMS feature/additional costs)

– add new satellites and enhance the environment

• Master and satellites with HD resolution

– UD5/6 max.: 2560 x 1600 pixel (master & satellite)

– UD2 max.: 1920 x 1200 pixel (satellite)




• Management trough UMS

– centralized

– easy to configure and to use


Universal MultiDisplay (UMD)


• User-dependent profile configuration (optional UMS feature/additional costs)

– based on centralized user setting profiles

• s.a. mouse settings, keyboard layout, wallpaper, and more

• Especially developed for larger infrastructure environments

– Roaming environments like call center or shift workplaces

• Hospital

• Airport

• Checkout

• Reception

• Centralized management trough UMS

– mixed environment possible

Shared WorkPlace (SWP)


Multimedia Codec Pack (MCP)

• Audio and video rendering on client side (optional feature/additional costs)

• Supported protocols

– gstreamer (local media player)

– multimedia content in the local browser (attention: no pre-installed Flash!)

– Citrix HDX multimedia redirection

– Citrix H.264 Deep Compression Codec

– Microsoft RDP multimedia redirection

– Microsoft RemoteFX8 video optimized

– vWorkspace Multimedia Redirection

• Supported audio and video files

– x86-software acceleration

• MP3, WMV (VC1), H264, WMA, MPEG-4, MPEG-2

Integrated

Security Features


Integrated Security Features

► Advantages around the security features

– extends the company security level

– manage all integrated security features through only

one centralized management tool

– uniform UI with standardized look & feel overall OS


– pre-installed frontend clients, without additional license costs

= enhance the company security and reduce fixed and

variable IT costs


IGEL Security Features (VPN)

• Pre-installed and ready to use

– OpenVPN (starting 5.07.100)• VPN based IGEL client management by IGEL UMS

– NCP-e VPN client (optional NCP-e licensing)

• universal IPsec-Client

– Genua GenuCard support (external USB hardware not included)

• full management trough the IGEL UMS

– profoundly management by the integrated Genua tool

• connection buildup through the IGEL Thin Client

– dial-in and hang-up, VPN connection buildup included

– supports ADSL, LAN, EDGE, 3G and 4G connections

• VS-NfD, NATO RESTRICED and RESTREINT UE authorized and certified


IGEL Security Features (Kerberos)


– pure Kerberos-Ticket-Handling

• based on

username and password

sophisticated „Two-Factor-Smartcard-Solutions“

• Smartcard and PIN

• through a „three-party-constellation“

1. IGEL Thin Client

2. Active Directory infrastructure

3. Kerberos enabled service (s.a. Citrix XenApp or XenDesktop)

• with a sophisticated rules and rights rollout management across the

network

on application level

for services

– no local „Fake-Active-Directory“


IGEL Security Features (USB)


– three different USB management solutions

• IGEL USB-Management (basic function)

– based on USB class, vendor/product-ID or by device UUID

– very simplified access and denial mechanism

• FabulaTech (extended function, requires optional server components from third party vendor)

– based on protocols (RDP, Horizion View, Citrix)

– features depend on used protocol

• Drivelock Thin Client Suite(particular function, requires optional server components from third party vendor)

– based on virtual protocols

– across the protocol

– user dependent USB management

– enable a very high safety standard


IGEL Security Features


– Smartcard support

• individually adaptable (look @ IGEL Partitions)

– IGEL Smartcard

– Gemalto IDPrime

– cryptas

– SecMaker NetID

– A.E.T. SafeSign

– SafeNet Aladdin eToken

– Smartcard reader support

• individually adaptable (look @ IGEL Partitions)

– PC/SC Lite

– M.U.S.C.L.E.

– HID OMNIKEY

– REINER SCT cyberjack

3rd Party Software and IGEL Accessories


3rd Party Software and IGEL Accessories

► General benefits around IGEL





3rd Party Database

• IGEL 3rd Party Database (Linux only)

– contains round about 2500 different components

• Categories are graphic cards, digital dictation, network adapters, smartcard

reader, sound cards, touchscreens, webcams and Wi-Fi adapters (USB+PCI)

– detailed information related to integrated driver

• Shows level of driver verification with a traffic light system

– GREEN: Hardware continuously verified through IGEL

– YELLOW: Hardware successful tested by third-party

– RED: Hardware unsuccessful tested

– GREY: No test results available so far

• Integrated customer feedback form

– submit new test cases to extend the database

– List of drivers is updated with every LX release

https://www.igel.com/de/service-support/linux-3rd-party-hardware-datenbank.html


IGEL Accessories

• Connectivity-bar (UD3/IZ3 and UD5/6 series)

– allows to modularly add ports

– connectivity only to those devices where it is needed

= reduce investments - only where needed, with extended flexibility

Version UD3 UD5 UD6 IZ3

Version 1

2x serial port

1x anti theft USB portX X

Version 2

2x serial port

1x integrated Wi-Fi extensionX X

Version 3

1x parallel port

1x anti theft USB portX X

Version 4

1x parallel port

1x integrated Wi-Fi extensionX X


IGEL Accessories

• VESA-mount (UD2/UD3/UD5/UD6/IZ2/IZ3)

– attached in a few seconds

– ideal for space constrained environments

– optimized cable management

– UD3/IZ3 Connectivity bar attachable e.g. for Wi-Fi


• Internal Smartcard Reader

– factory-installed option for: UD3/IZ3, UD5/6, UD9

– Factory-installed by default: UD10

IGEL Accessories

Vertical Markets


Vertical Markets

► IGEL understands the various vertical markets and integrates

industry specific solutions as well as customized solutions

– strong technical customer orientation towards different verticals

– out-of-the-box integration for key solutions in these markets (s.a. digital

dictation for healthcare)




– reduce labor costs


• IGEL Technology provides specialized account know-how to

customers

Finance & Insurance

Transport & Logistics

Automotive

Healthcare

Retail

Government

How does IGEL understand this sectors?

Find some examples on next few slides…

Vertical Markets


Example 1: Security and workplace optimization included

• each x86-based IGEL Thin- and Zero-Client contains imprivata ProveID

optimized single sign-on solution developed for the healthcare-sector

every IGEL hard- and software solution (excl. UD10) supports imprivata ProveID

Windows integration through IGEL Partial Updates

fast and direct boot into the VDI session (Appliance Mode)

different authentication modes (s.a. RFID)

configure session roaming through imprivata appliance

• digital dictation solution (only LX)

Grundig, Philips, Olympus

pre-installed in each IGEL Linux OS

3rd party database for reference

Windows integration through IGEL Partial Updates

Vertical Markets (Healthcare)

https://www.igel.com/de/service-support/linux-3rd-party-hardware-datenbank.html


Example 2: Industry specific VDI solution meets ruggedized

industry specific hardware

• ERICOM PowerTerm

PowerTerm without additional license costs – incl. in every IGEL Universal Desktop device

pre-installed PowerTerm clients (Linux)

two different connection types: Terminal Emulator or WebConnect

easy configuration through local setup or UMS profile rollout

• Industry PC device support

ADVANTECH DLoG - MTC6 (IGEL supported hardware)

Standardized endpoint devices to one operating system

• convert 3rd-party-devices to IGEL software Thin Clients

Vertical Markets (Logistic)


Example 3: Compliance meets high availability & efficiency

• High Availability

enables company compliance standards like Basel II & III or HIPAA

high availability of data and resources (hence not mandatory for Thin Client boot)

• UMS Server cluster with 2+ nodes

• UMS Load Balancer: redundancy

• Database (3rd party): Cluster support (Microsoft SQL and Oracle)

optimized and scheduled load balancing for large environments (500+ devices)

• Universal MultiDisplay

trader workstations and multi monitor scenarios up to 8 HD displays

management and administration through the UMS

easy licensing and no special hardware required

• Smartcard

extended company security through Single Sign-on features

broad range of integrated and pre-installed solutions (Reiner SCT, DATEV, etc.)

Vertical Markets (Finance)


…more knowledge on technical details required?

…send an email to

[email protected]

mailto:[email protected]

Thank you

Questions?

Technical USPs and advantages - IGEL Technology · Advantages around the UMS – leading Thin...

Documents

Transcript of Technical USPs and advantages - IGEL Technology · Advantages around the UMS – leading Thin...