technical usps and advantages - igel · – firmware integrated drivers • to support broad range...
TRANSCRIPT
Technical USPs and advantages
around IGEL´s product portfolio
Product Marketing
2016 Q1
Gerhard Setzmüller
Gerhard Setzmüller | Product Marketing | Page 2IGEL Technology |
Agenda
Gerhard Setzmüller | Product Marketing | Page 2IGEL Technology |
► IGEL Management Software
– Universal Management Suite (UMS)
Gerhard Setzmüller | Product Marketing | Page 3IGEL Technology |
Agenda
Gerhard Setzmüller | Product Marketing | Page 3IGEL Technology |
► IGEL Operating Systems
– IGEL Universal Desktop (UD)
• Linux v5 (LX)
– Protection against tampering
• Windows Embedded Standard 7 (W7 and W7+)
– IGEL Zero Clients (IZ)
• ARM devices (Citrix, Microsoft)
• x86 devices (Citrix, Microsoft, VMware)
– Universal Desktop Converter 2 (UDC2)
Gerhard Setzmüller | Product Marketing | Page 4IGEL Technology |
Agenda
Gerhard Setzmüller | Product Marketing | Page 4IGEL Technology |
► Functional Extensions (optional/additional costs)
– Universal Customization Builder (UCB)
– High Availability Extension (HA)
– Universal MultiDisplay (UMD)
– Shared WorkPlace (SWP)
– Multimedia Codec Pack (MCP)
Gerhard Setzmüller | Product Marketing | Page 5IGEL Technology |
Agenda
Gerhard Setzmüller | Product Marketing | Page 5IGEL Technology |
► Integrated Security Features
– VPN solutions
– Kerberos
– USB management
– Single Sign-On
• Smartcard Readers
• Smartcards
Gerhard Setzmüller | Product Marketing | Page 6IGEL Technology |
Agenda
Gerhard Setzmüller | Product Marketing | Page 6IGEL Technology |
► 3rd Party Hardware Support and IGEL Options
– 3rd Party Hardware Database
– Connectivity-Foot
– Integrated Smartcard Reader
– VESA mount
Gerhard Setzmüller | Product Marketing | Page 7IGEL Technology |
Agenda
Gerhard Setzmüller | Product Marketing | Page 7IGEL Technology |
► Vertical Markets
– Exemplary solutions for dedicated verticals
IGEL Management Software
Gerhard Setzmüller | Product Marketing | Page 9IGEL Technology |
IGEL Software USPs
► Advantages around the UMS
– leading Thin Client management software solution
– included and delivered with every
IGEL Thin/Zero/Soft Client without additional costs
– uniform UI with standardized look & feel
– quick implementation
– high degree of standardization
– high flexibility relating to 3rd party solutions & customization
= saves money and reduces fixed and variable IT costs
Gerhard Setzmüller | Product Marketing | Page 10IGEL Technology |
Universal Management Suite
• Unified management
– only one tool to manage all IGEL operating systems
• LX, UDC2, IZ and WES (W7 and W7+)
• manages converted 3rd party devices
– common profiles based on IGEL meta language
• this „meta-translator“ only roll out the required parameters which are
available on the target system
– general and easy to operate user interface
• UMS = local device setup the same awesome UI
Gerhard Setzmüller | Product Marketing | Page 11IGEL Technology |
Universal Management Suite
• SSL based communication
– each Thin Client that connects to the UMS receives and stores a
public key
• as of now the whole traffic and the communication between the
client and the UMS is based on SSL encryption
• certificate-based encrypted communication
– protects against DDoS attacks
– protects against man-in-the-middle attacks
– HTTPS based communication between
• UMS console (admin client) and UMS server over TCP port 8443
Gerhard Setzmüller | Product Marketing | Page 12IGEL Technology |
Universal Management Suite
• Basic configuration and rollout without any scripting
– set all parameters without any scripting knowledge or
text file editing
• Linux and Windows
– customization through user friendly and uniform UI with
standardized look & feel
• both in the UMS (profiles) and within the local device setup
across all IGEL OSes
– UD/IZ (LX)
– UDC2
– WES (W7 and W7+)
Gerhard Setzmüller | Product Marketing | Page 13IGEL Technology |
Universal Management Suite
• UMS Views
– easy Thin Client query through uniform and user friendly
wizard
– combine criterions with operators to achieve best results
Gerhard Setzmüller | Product Marketing | Page 14IGEL Technology |
Universal Management Suite
• Automatic client configuration
– uses AND/OR logic operators on predefined criterions
– relational operators: not like, like, equal to, greater than, less than
– up to seven criterions to combine• MAC-address, last known IP address, name, network name, product name,
product ID, firmware version, netmask
– combine criterions and operators to complex rule sets
– each rule set can define its own default directory
Gerhard Setzmüller | Product Marketing | Page 15IGEL Technology |
Universal Management Suite
• UMS Administrator– System configuration backups
– Certificate management
IGEL OSes
Gerhard Setzmüller | Product Marketing | Page 17IGEL Technology |
IGEL Operating System USP´s
► Advantages around the IGEL operating systems
– management software always included for free (UD/IZ and UDC2)
• centralized management
– hardware warranty up to 5 years without any additional costs
(except UD 9, UD10 and IZ)
– free software updates during product lifecycle and 3 years additional
software maintenance after EOL
– uniform UI with standardized look & feel across OSes
– OS independent, common profiles
– quick implementation
– high degree of standardization
– high flexibility relating to 3rd party solutions & customization
Gerhard Setzmüller | Product Marketing | Page 18IGEL Technology |
Universal Desktop (LX v5)
• IGEL Partitions
– this function allows to turn pre-installed features on or off
• s.a. Citrix Receiver, ThinPrint, and so on…
• similar to Windows Features
Gerhard Setzmüller | Product Marketing | Page 19IGEL Technology |
Universal Desktop (LX v5)
• Protection against tampering and extended system security
during the update process
– the update- and boot- mechanism uses a hash value check, whether the
partition has been modified
• if there is a modified critical partition
the device will not boot
• there are two different critical partitions existing on the system
system partition
user partition
• if there is a modified uncritical partition
– the device will boot, but only the affected part will be deactivated and
the scope of function is restricted
• apart from the two critical partitions all other partitions are considered as
uncritical
Gerhard Setzmüller | Product Marketing | Page 20IGEL Technology |
Universal Management Suite 4
• Fail-Safe firmware update
particularly secure Thin Client management
• firmware updates always finish completely
the device always keeps running
the device always stays bootable
update process without critical phases
critical updates always processed by two phases
Gerhard Setzmüller | Product Marketing | Page 21IGEL Technology |
Fail-Safe Firmware Update Process
Start Update
Free SpaceFree Space
UD Firmware 2
(Complete)
Free SpaceFree Space
UD Firmware 2
(Incomplete)
UD Firmware 1
If Update failed
Reboot
Update OK
Reboot
Update starts again Start new system
UD Firmware 1 UD Firmware 1
UD Firmware 2
(Complete)
Free Space
(UD Firmware 1)
Gerhard Setzmüller | Product Marketing | Page 22IGEL Technology |
Universal Desktop
• Benefits of IGEL Partitions
– firmware customization on customer side
• size the firmware down to basic functions
• minimize the lines of active code
• extend the system performance
– flash medium cannot be mounted on any other device
• IGEL uses its own partitioning system
• IGEL partitions are compressed, thus data is obfuscated
• checksums of IGEL partitions avoid loading of modified code
– configuration is written to a dedicated and compressed partition
Gerhard Setzmüller | Product Marketing | Page 23IGEL Technology |
Universal Desktop (LX v5)
• Buddy Updates (similar to Microsoft BranchCache)
– Each IGEL Thin/Zero Client, which received a firmware update by the
UMS, can be an update server for the other defined devices on a
dedicated branch network.
Benefits:
– Send a firmware one time to update many clients
– Results in a bandwidth reduction (WAN/LAN)
– Quickly distribute firmware releases in a
WAN environment
Gerhard Setzmüller | Product Marketing | Page 24IGEL Technology |
Universal Desktop (LX v5)
• Buddy Update process (similar to Microsoft BranchCache)
Branch Office LAN
Buddy Server
LAN
WAN
Headquarter – Datacenter
Update Server
Buddies
Buddies
Gerhard Setzmüller | Product Marketing | Page 25IGEL Technology |
Universal Desktop Converter 2
• Converts most of x86 based hardware
– extends the life of old/depreciated desktop hardware
– standardization of desktop operating systems on PCs and thin clients
– enables the step-by-step introduction of SBC and VDI (virtual desktops)
• Centralized remote management
– management software (UMS) included for free
• Based on IGEL Universal Desktop Firmware (Linux v5)
– UD and UDC2 share the same set of features
• Broad range of pre-installed clients for VDI and SBC access
– from Citrix to VMware (more than 15 clients)
• Three different operating modes
– installation on a device (removes previous OS)
– boot UDC from a USB stick
– run UDC in a virtual machine (works with standard hypervisors)
Gerhard Setzmüller | Product Marketing | Page 26IGEL Technology |
Universal Desktop Converter 2
• Comprehensive hardware- and 3rd party device support
– firmware integrated drivers
• to support broad range of x86-compatible hardware
• detailed driver information available on 3rd party hardware DB
– IGEL supported devices
• Acer: Veriton N260G / N281G / N2110G
• Advantech-DLoG: MTC 6
• DELL / Wyse: C90LE / C90LEW / D10D / D50D / R50L / Z50D
• Fujitsu: Futro S500 / S550 / S550-2 / S700 / S720 / S900 / S920
• HP: t5545 / t5565 / t5630w / t5730 / t5735 / t5745 / t510 / t520 / t610 / t620 / t820
• Lenovo: M32
• Samsung: TC190 / TC240
– drives are added and updated continuously with every FW release
Gerhard Setzmüller | Product Marketing | Page 27IGEL Technology |
Universal Desktop (WES) (based on Windows Embedded)
• Recognized industry standard
– Windows Embedded Standard 7
• Genuine RDP/RDS support (currently version 8.1)
• WES and Linux share common UMS profiles
– operating system specific parameters are simply ignored if unavailable
• Pre-installed and IGEL verified software components
– smartcard driver, VPN, etc.
• IGEL Partial Update
– firmware customization at customer site
– fully integrated in UCB framework
– optimizes roll out of windows hotfixes and additional software
– saves bandwidth (WAN and LAN)
• no need to deploy a complete system snapshot, delivers only the changed
parts
Gerhard Setzmüller | Product Marketing | Page 28IGEL Technology |
Universal Desktop (WES) (based on Windows Embedded)
• Embedded Linux management
– manages the WES system in an update or emergency case
– manages the device through the embedded Linux, if it boots not correctly
• File Based Write Filter (FBWF)
– security standard similar to Linux
– the user has the option to deactivate
• enables the Windows OS customization
– install drivers and applications
• Microsoft domain join can be managed completely by the UMS
Gerhard Setzmüller | Product Marketing | Page 29IGEL Technology |
Zero Clients
• Specialized zero clients – Citrix HDX, RemoteFX or Horizon View
– based on IGEL Linux (x86)
• No typical zero client limitations– updates available, management through UMS, technical support
• Choice between desktop- or appliance mode– very fast and direct boot into the respective VDI session
• Zero Touch deployment– profile based configuration
– reduces the desktop management
• management through the free included IGEL management solution (UMS)
• Future proof, investment protection and software subscription for free – IGEL UD-Upgrade-License
• upgrade path to Universal Desktop environment
• further use of the same hardware
Gerhard Setzmüller | Product Marketing | Page 30IGEL Technology |
• IGEL is the first and only vendor of Linux based and dedicated
Microsoft RemoteFX hardware platforms worldwide.
IGEL Zero Client IZ2 and IZ3 RFX
RemoteFX
Functional Extensions (optional/additional costs)
Gerhard Setzmüller | Product Marketing | Page 32IGEL Technology |
Functional Extensions (optional/additional costs)
► General benefits regarding all optional features
– seamless integration into the free included IGEL management software
– customization at customer site
• no depending to the client vendor
– extend the productivity
– enhance the basic functions to an enterprise solution
– uniform UI with standardized look & feel across the OSes
– quick implementation
– high degree of standardization
= 1. enables company compliance standards
2. enhances the company security level
3. enhances the efficiency
Gerhard Setzmüller | Product Marketing | Page 33IGEL Technology |
Universal Management Suite
• Universal Customization Builder (UCB) (optional/additional costs)
– adjusts firmware at costumer site
• generating, packing and rolling out firmware expansion packages
– no need of detailed Shell- or Windows scripting knowledge
– user-friendly GUI with the familiar look and feel of the IGEL UMS
• automatic syntax check
• packs the components to get along with Linux and WES standards
• available for IGEL Universal Desktop
– Linux (Custom Partition)
– WES (Partial Updates)
• reduces the bandwidth:
only deliver a specific part of the firmware, never roll out the whole image
– predefined templates and UCB support trough IGEL
Gerhard Setzmüller | Product Marketing | Page 34IGEL Technology |
• Firmware customization made easy:
IGEL Custom Partition (LX) and Partial Update (WES)
UCB
Gerhard Setzmüller | Product Marketing | Page 35IGEL Technology |
Universal Management Suite
• High Availability Extension (HA) (optional UMS extension/additional costs)
– two or several UMS-Server within the network (2+)
• redundancy or scaling
• automatic failover mechanism
– integrated Load Balancer
• independent simultaneous booting processes
• especially developed for larger environments (500+)
• can also be used as a redundant system
– supported database-clusters
• Oracle DB (11g or higher)
• Microsoft SQL Server (2008 or higher)
Gerhard Setzmüller | Product Marketing | Page 36IGEL Technology |
• Multi display scenarios (up to max. 8 screens) (optional/ UMS feature/additional costs)
– add new satellites and enhance the environment
• Master and satellites with HD resolution
– UD5/6 max.: 2560 x 1600 pixel (master & satellite)
– UD2 max.: 1920 x 1200 pixel (satellite)
– UD3 max.: 1920 x 1200 pixel (satellite)
– UD9 max.: 1920 x 1080 pixel (satellite)
– UD10 max.: 2560 x 1600 pixel (satellite)
• Management trough UMS
– centralized
– easy to configure and to use
– quick implementation
Universal MultiDisplay (UMD)
Gerhard Setzmüller | Product Marketing | Page 37IGEL Technology |
• User-dependent profile configuration (optional UMS feature/additional costs)
– based on centralized user setting profiles
• s.a. mouse settings, keyboard layout, wallpaper, and more
• Especially developed for larger infrastructure environments
– Roaming environments like call center or shift workplaces
• Hospital
• Airport
• Checkout
• Reception
• Centralized management trough UMS
– mixed environment possible
Shared WorkPlace (SWP)
Gerhard Setzmüller | Product Marketing | Page 38IGEL Technology |
Multimedia Codec Pack (MCP)
• Audio and video rendering on client side (optional feature/additional costs)
• Supported protocols
– gstreamer (local media player)
– multimedia content in the local browser (attention: no pre-installed Flash!)
– Citrix HDX multimedia redirection
– Citrix H.264 Deep Compression Codec
– Microsoft RDP multimedia redirection
– Microsoft RemoteFX8 video optimized
– vWorkspace Multimedia Redirection
• Supported audio and video files
– x86-software acceleration
• MP3, WMV (VC1), H264, WMA, MPEG-4, MPEG-2
Integrated
Security Features
Gerhard Setzmüller | Product Marketing | Page 40IGEL Technology |
Integrated Security Features
► Advantages around the security features
– extends the company security level
– manage all integrated security features through only
one centralized management tool
– uniform UI with standardized look & feel overall OS
– quick implementation
– pre-installed frontend clients, without additional license costs
= enhance the company security and reduce fixed and
variable IT costs
Gerhard Setzmüller | Product Marketing | Page 41IGEL Technology |
IGEL Security Features (VPN)
• Pre-installed and ready to use
– OpenVPN (starting 5.07.100)• VPN based IGEL client management by IGEL UMS
– NCP-e VPN client (optional NCP-e licensing)
• universal IPsec-Client
– Genua GenuCard support (external USB hardware not included)
• full management trough the IGEL UMS
– profoundly management by the integrated Genua tool
• connection buildup through the IGEL Thin Client
– dial-in and hang-up, VPN connection buildup included
– supports ADSL, LAN, EDGE, 3G and 4G connections
• VS-NfD, NATO RESTRICED and RESTREINT UE authorized and certified
Gerhard Setzmüller | Product Marketing | Page 42IGEL Technology |
IGEL Security Features (Kerberos)
• Pre-installed and ready to use
– pure Kerberos-Ticket-Handling
• based on
username and password
sophisticated „Two-Factor-Smartcard-Solutions“
• Smartcard and PIN
• through a „three-party-constellation“
1. IGEL Thin Client
2. Active Directory infrastructure
3. Kerberos enabled service (s.a. Citrix XenApp or XenDesktop)
• with a sophisticated rules and rights rollout management across the
network
on application level
for services
– no local „Fake-Active-Directory“
Gerhard Setzmüller | Product Marketing | Page 43IGEL Technology |
IGEL Security Features (USB)
• Pre-installed and ready to use
– three different USB management solutions
• IGEL USB-Management (basic function)
– based on USB class, vendor/product-ID or by device UUID
– very simplified access and denial mechanism
• FabulaTech (extended function, requires optional server components from third party vendor)
– based on protocols (RDP, Horizion View, Citrix)
– features depend on used protocol
• Drivelock Thin Client Suite(particular function, requires optional server components from third party vendor)
– based on virtual protocols
– across the protocol
– user dependent USB management
– enable a very high safety standard
Gerhard Setzmüller | Product Marketing | Page 44IGEL Technology |
IGEL Security Features
• Pre-installed and ready to use
– Smartcard support
• individually adaptable (look @ IGEL Partitions)
– IGEL Smartcard
– Gemalto IDPrime
– cryptas
– SecMaker NetID
– A.E.T. SafeSign
– SafeNet Aladdin eToken
– Smartcard reader support
• individually adaptable (look @ IGEL Partitions)
– PC/SC Lite
– M.U.S.C.L.E.
– HID OMNIKEY
– REINER SCT cyberjack
3rd Party Software and IGEL Accessories
Gerhard Setzmüller | Product Marketing | Page 46IGEL Technology |
3rd Party Software and IGEL Accessories
► General benefits around IGEL
– high flexibility relating to 3rd party solutions & customization
– quick implementation
– high degree of standardization
Gerhard Setzmüller | Product Marketing | Page 47IGEL Technology |
3rd Party Database
• IGEL 3rd Party Database (Linux only)
– contains round about 2500 different components
• Categories are graphic cards, digital dictation, network adapters, smartcard
reader, sound cards, touchscreens, webcams and Wi-Fi adapters (USB+PCI)
– detailed information related to integrated driver
• Shows level of driver verification with a traffic light system
– GREEN: Hardware continuously verified through IGEL
– YELLOW: Hardware successful tested by third-party
– RED: Hardware unsuccessful tested
– GREY: No test results available so far
• Integrated customer feedback form
– submit new test cases to extend the database
– List of drivers is updated with every LX release
Gerhard Setzmüller | Product Marketing | Page 48IGEL Technology |
IGEL Accessories
• Connectivity-bar (UD3/IZ3 and UD5/6 series)
– allows to modularly add ports
– connectivity only to those devices where it is needed
= reduce investments - only where needed, with extended flexibility
Version UD3 UD5 UD6 IZ3
Version 1
2x serial port
1x anti theft USB portX X
Version 2
2x serial port
1x integrated Wi-Fi extensionX X
Version 3
1x parallel port
1x anti theft USB portX X
Version 4
1x parallel port
1x integrated Wi-Fi extensionX X
Gerhard Setzmüller | Product Marketing | Page 49IGEL Technology |
IGEL Accessories
• VESA-mount (UD2/UD3/UD5/UD6/IZ2/IZ3)
– attached in a few seconds
– ideal for space constrained environments
– optimized cable management
– UD3/IZ3 Connectivity bar attachable e.g. for Wi-Fi
Gerhard Setzmüller | Product Marketing | Page 50IGEL Technology |
• Internal Smartcard Reader
– factory-installed option for: UD3/IZ3, UD5/6, UD9
– Factory-installed by default: UD10
IGEL Accessories
Vertical Markets
Gerhard Setzmüller | Product Marketing | Page 52IGEL Technology |
Vertical Markets
► IGEL understands the various vertical markets and integrates
industry specific solutions as well as customized solutions
– strong technical customer orientation towards different verticals
– out-of-the-box integration for key solutions in these markets (s.a. digital
dictation for healthcare)
– high flexibility relating to 3rd party solutions & customization
– quick implementation
– high degree of standardization
– reduce labor costs
Gerhard Setzmüller | Product Marketing | Page 53IGEL Technology |
• IGEL Technology provides specialized account know-how to
customers
Finance & Insurance
Transport & Logistics
Automotive
Healthcare
Retail
Government
How does IGEL understand this sectors?
Find some examples on next few slides…
Vertical Markets
Gerhard Setzmüller | Product Marketing | Page 54IGEL Technology |
Example 1: Security and workplace optimization included
• each x86-based IGEL Thin- and Zero-Client contains imprivata ProveID
optimized single sign-on solution developed for the healthcare-sector
every IGEL hard- and software solution (excl. UD10) supports imprivata ProveID
Windows integration through IGEL Partial Updates
fast and direct boot into the VDI session (Appliance Mode)
different authentication modes (s.a. RFID)
configure session roaming through imprivata appliance
• digital dictation solution (only LX)
Grundig, Philips, Olympus
pre-installed in each IGEL Linux OS
3rd party database for reference
Windows integration through IGEL Partial Updates
Vertical Markets (Healthcare)
Gerhard Setzmüller | Product Marketing | Page 55IGEL Technology |
Example 2: Industry specific VDI solution meets ruggedized
industry specific hardware
• ERICOM PowerTerm
PowerTerm without additional license costs – incl. in every IGEL Universal Desktop device
pre-installed PowerTerm clients (Linux)
two different connection types: Terminal Emulator or WebConnect
easy configuration through local setup or UMS profile rollout
• Industry PC device support
ADVANTECH DLoG - MTC6 (IGEL supported hardware)
Standardized endpoint devices to one operating system
• convert 3rd-party-devices to IGEL software Thin Clients
Vertical Markets (Logistic)
Gerhard Setzmüller | Product Marketing | Page 56IGEL Technology |
Example 3: Compliance meets high availability & efficiency
• High Availability
enables company compliance standards like Basel II & III or HIPAA
high availability of data and resources (hence not mandatory for Thin Client boot)
• UMS Server cluster with 2+ nodes
• UMS Load Balancer: redundancy
• Database (3rd party): Cluster support (Microsoft SQL and Oracle)
optimized and scheduled load balancing for large environments (500+ devices)
• Universal MultiDisplay
trader workstations and multi monitor scenarios up to 8 HD displays
management and administration through the UMS
easy licensing and no special hardware required
• Smartcard
extended company security through Single Sign-on features
broad range of integrated and pre-installed solutions (Reiner SCT, DATEV, etc.)
Vertical Markets (Finance)
Gerhard Setzmüller | Product Marketing | Page 57IGEL Technology |
…more knowledge on technical details required?
…send an email to
Thank you
Questions?