1. Technical USPs and advantages around IGEL´s product portfolio
2016 Q1
Gerhard Setzmüller
Product Marketing

2. IGEL Management Software
Universal Management Suite (UMS)

3. IGEL Operating Systems
IGEL Universal Desktop (UD)
Linux v5 (LX)
Protection against tampering
Windows Embedded Standard 7 (W7 and W7+)
IGEL Zero Clients (IZ)
ARM devices (Citrix, Microsoft)
x86 devices (Citrix, Microsoft, VMware)
Universal Desktop Converter 2 (UDC2)

4. Functional Extensions (optional/additional costs)
Universal Customization Builder (UCB)
High Availability Extension (HA)
Universal MultiDisplay (UMD)
Shared WorkPlace (SWP)
Multimedia Codec Pack (MCP)

5. Integrated Security Features
VPN solutions
Kerberos
USB management
Single Sign-On
Smartcard Readers
Smartcards

6. 3rd Party Hardware Support and IGEL Options
3rd Party Hardware Database
Connectivity-Foot
Integrated Smartcard Reader
VESA mount

7. Vertical Markets
Exemplary solutions for dedicated verticals

8. IGEL Management Software

9. IGEL Software USPs Advantages around the UMS
leading Thin Client management software solution
included and delivered with every IGEL Thin/Zero/Soft Client without additional costs
uniform UI with standardized look & feel
quick implementation
high degree of standardization
high flexibility relating to 3rd party solutions & customization
= saves money and reduces fixed and variable IT costs

10. Universal Management Suite
Unified management
only one tool to manage all IGEL operating systems
LX, UDC2, IZ and WES (W7 and W7+)
manages converted 3rd party devices
common profiles based on IGEL meta language
this „meta-translator“ only roll out the required parameters which are available on the target system
general and easy to operate user interface
UMS = local device setup  the same awesome UI
UMS5: API und Windows-Agent hinzufügen

11. Universal Management Suite
SSL based communication
each Thin Client that connects to the UMS receives and stores a public key
as of now the whole traffic and the communication between the client and the UMS is based on SSL encryption
certificate-based encrypted communication
protects against DDoS attacks
protects against man-in-the-middle attacks
HTTPS based communication between
UMS console (admin client) and UMS server over TCP port 8443
UMS5: API und Windows-Agent hinzufügen

12. Universal Management Suite
Basic configuration and rollout without any scripting
set all parameters without any scripting knowledge or text file editing
Linux and Windows
customization through user friendly and uniform UI with standardized look & feel
both in the UMS (profiles) and within the local device setup across all IGEL OSes
UD/IZ (LX)
UDC2
WES (W7 and W7+)
UMS5: API und Windows-Agent hinzufügen

13. Universal Management Suite
UMS Views
easy Thin Client query through uniform and user friendly wizard
combine criterions with operators to achieve best results
UMS5: API und Windows-Agent hinzufügen

14. Universal Management Suite
Automatic client configuration
uses AND/OR logic operators on predefined criterions
relational operators: not like, like, equal to, greater than, less than
up to seven criterions to combine
MAC-address, last known IP address, name, network name, product name, product ID, firmware version, netmask
combine criterions and operators to complex rule sets
each rule set can define its own default directory
UMS5: API und Windows-Agent hinzufügen

15. Universal Management Suite
UMS Administrator
System configuration backups
Certificate management
UMS5: API und Windows-Agent hinzufügen

16. IGEL OSes

17. IGEL Operating System USP´s
Advantages around the IGEL operating systems
management software always included for free (UD/IZ and UDC2)
centralized management
hardware warranty up to 5 years without any additional costs (except UD 9, UD10 and IZ)
free software updates during product lifecycle and 3 years additional software maintenance after EOL
uniform UI with standardized look & feel across OSes
OS independent, common profiles
quick implementation
high degree of standardization
high flexibility relating to 3rd party solutions & customization

18. Universal Desktop (LX v5)
IGEL Partitions
this function allows to turn pre-installed features on or off
s.a. Citrix Receiver, ThinPrint, and so on…
similar to Windows Features
Base OS
Desktop
ICA partition
VMware partition
ThinPrint partition
imprivata partition
and so on…

19. Universal Desktop (LX v5)
Protection against tampering and extended system security during the update process
the update- and boot- mechanism uses a hash value check, whether the partition has been modified
if there is a modified critical partition
the device will not boot
there are two different critical partitions existing on the system
system partition
user partition
if there is a modified uncritical partition
the device will boot, but only the affected part will be deactivated and the scope of function is restricted
apart from the two critical partitions all other partitions are considered as uncritical

20. Universal Management Suite 4
Fail-Safe firmware update
particularly secure Thin Client management
firmware updates always finish completely
the device always keeps running
the device always stays bootable
update process without critical phases
critical updates always processed by two phases
UMS5: API und Windows-Agent hinzufügen

21. Fail-Safe Firmware Update Process
Start Update
If Update failed
Reboot
Update OK
Reboot
UD Firmware 1
UD Firmware 1
UD Firmware 1
Free Space
(UD Firmware 1)
UD Firmware 2
(Incomplete)
UD Firmware 2
(Complete)
UD Firmware 2
(Complete)
Free Space
Free Space
Free Space
Free Space
UMS5: API und Windows-Agent hinzufügen
Update starts again
Start new system

22. Universal Desktop Benefits of IGEL Partitions
firmware customization on customer side
size the firmware down to basic functions
minimize the lines of active code
extend the system performance
flash medium cannot be mounted on any other device
IGEL uses its own partitioning system
IGEL partitions are compressed, thus data is obfuscated
checksums of IGEL partitions avoid loading of modified code
configuration is written to a dedicated and compressed partition

23. Universal Desktop (LX v5)
Buddy Updates (similar to Microsoft BranchCache)
Each IGEL Thin/Zero Client, which received a firmware update by the UMS, can be an update server for the other defined devices on a dedicated branch network.
Benefits:
Send a firmware one time to update many clients
Results in a bandwidth reduction (WAN/LAN)
Quickly distribute firmware releases in a WAN environment

24. Universal Desktop (LX v5)
Buddy Update process (similar to Microsoft BranchCache)
Headquarter – Datacenter
Update Server
Branch Office LAN
Buddy Server
LAN
WAN
Buddies
Buddies

25. Universal Desktop Converter 2
Converts most of x86 based hardware
extends the life of old/depreciated desktop hardware
standardization of desktop operating systems on PCs and thin clients
enables the step-by-step introduction of SBC and VDI (virtual desktops)
Centralized remote management
management software (UMS) included for free
Based on IGEL Universal Desktop Firmware (Linux v5)
UD and UDC2 share the same set of features
Broad range of pre-installed clients for VDI and SBC access
from Citrix to VMware (more than 15 clients)
Three different operating modes
installation on a device (removes previous OS)
boot UDC from a USB stick
run UDC in a virtual machine (works with standard hypervisors)

26. Universal Desktop Converter 2
Comprehensive hardware- and 3rd party device support
firmware integrated drivers
to support broad range of x86-compatible hardware
detailed driver information available on 3rd party hardware DB
IGEL supported devices
Acer: Veriton N260G / N281G / N2110G
Advantech-DLoG: MTC 6
DELL / Wyse: C90LE / C90LEW / D10D / D50D / R50L / Z50D
Fujitsu: Futro S500 / S550 / S550-2 / S700 / S720 / S900 / S920
HP: t5545 / t5565 / t5630w / t5730 / t5735 / t5745 / t510 / t520 / t610 / t620 / t820
Lenovo: M32
Samsung: TC190 / TC240
drives are added and updated continuously with every FW release

27. Universal Desktop (WES) (based on Windows Embedded)
Recognized industry standard
Windows Embedded Standard 7
Genuine RDP/RDS support (currently version 8.1)
WES and Linux share common UMS profiles
operating system specific parameters are simply ignored if unavailable
Pre-installed and IGEL verified software components
smartcard driver, VPN, etc.
IGEL Partial Update
firmware customization at customer site
fully integrated in UCB framework
optimizes roll out of windows hotfixes and additional software
saves bandwidth (WAN and LAN)
no need to deploy a complete system snapshot, delivers only the changed parts

28. Universal Desktop (WES) (based on Windows Embedded)
Embedded Linux management
manages the WES system in an update or emergency case
manages the device through the embedded Linux, if it boots not correctly
File Based Write Filter (FBWF)
security standard similar to Linux
the user has the option to deactivate
enables the Windows OS customization
install drivers and applications
Microsoft domain join can be managed completely by the UMS

29. Zero Clients Specialized zero clients
Citrix HDX, RemoteFX or Horizon View
based on IGEL Linux (x86)
No typical zero client limitations
updates available, management through UMS, technical support
Choice between desktop- or appliance mode
very fast and direct boot into the respective VDI session
Zero Touch deployment
profile based configuration
reduces the desktop management
management through the free included IGEL management solution (UMS)
Future proof, investment protection and software subscription for free
IGEL UD-Upgrade-License
upgrade path to Universal Desktop environment
further use of the same hardware

30. IGEL Zero Client IZ2 and IZ3 RFX
RemoteFX
IGEL is the first and only vendor of Linux based and dedicated Microsoft RemoteFX hardware platforms worldwide.
IGEL Zero Client IZ2 and IZ3 RFX

31. Functional Extensions (optional/additional costs)

32. Functional Extensions (optional/additional costs)
General benefits regarding all optional features
seamless integration into the free included IGEL management software
customization at customer site
no depending to the client vendor
extend the productivity
enhance the basic functions to an enterprise solution
uniform UI with standardized look & feel across the OSes
quick implementation
high degree of standardization
= 1. enables company compliance standards 2. enhances the company security level 3. enhances the efficiency

33. Universal Management Suite
Universal Customization Builder (UCB) (optional/additional costs)
adjusts firmware at costumer site
generating, packing and rolling out firmware expansion packages
no need of detailed Shell- or Windows scripting knowledge
user-friendly GUI with the familiar look and feel of the IGEL UMS
• automatic syntax check
packs the components to get along with Linux and WES standards
available for IGEL Universal Desktop
Linux (Custom Partition)
WES (Partial Updates)
reduces the bandwidth: only deliver a specific part of the firmware, never roll out the whole image
predefined templates and UCB support trough IGEL

34. UCB
Firmware customization made easy: IGEL Custom Partition (LX) and Partial Update (WES)

35. Universal Management Suite
High Availability Extension (HA) (optional UMS extension/additional costs)
two or several UMS-Server within the network (2+)
redundancy or scaling
automatic failover mechanism
integrated Load Balancer
independent simultaneous booting processes
especially developed for larger environments (500+)
can also be used as a redundant system
supported database-clusters
Oracle DB (11g or higher)
Microsoft SQL Server (2008 or higher)

36. Universal MultiDisplay (UMD)
Multi display scenarios (up to max. 8 screens) (optional/ UMS feature/additional costs)
add new satellites and enhance the environment
Master and satellites with HD resolution
UD5/6 max.: 2560 x 1600 pixel (master & satellite)
UD2 max.: 1920 x 1200 pixel (satellite)
UD3 max.: 1920 x 1200 pixel (satellite)
UD9 max.: 1920 x 1080 pixel (satellite)
UD10 max.: 2560 x 1600 pixel (satellite)
Management trough UMS
centralized
easy to configure and to use
quick implementation

37. Shared WorkPlace (SWP)
User-dependent profile configuration (optional UMS feature/additional costs)
based on centralized user setting profiles
s.a. mouse settings, keyboard layout, wallpaper, and more
Especially developed for larger infrastructure environments
Roaming environments like call center or shift workplaces
Hospital
Airport
Checkout
Reception
Centralized management trough UMS
mixed environment possible

38. Multimedia Codec Pack (MCP)
Audio and video rendering on client side (optional feature/additional costs)
Supported protocols
gstreamer (local media player)
multimedia content in the local browser (attention: no pre-installed Flash!)
Citrix HDX multimedia redirection
Citrix H.264 Deep Compression Codec
Microsoft RDP multimedia redirection
Microsoft RemoteFX8 video optimized
vWorkspace Multimedia Redirection
Supported audio and video files
x86-software acceleration
MP3, WMV (VC1), H264, WMA, MPEG-4, MPEG-2

39. Integrated Security Features

40. Integrated Security Features
Advantages around the security features
extends the company security level
manage all integrated security features through only one centralized management tool
uniform UI with standardized look & feel overall OS
quick implementation
pre-installed frontend clients, without additional license costs
= enhance the company security and reduce fixed and variable IT costs

41. IGEL Security Features (VPN)
Pre-installed and ready to use
OpenVPN (starting )
VPN based IGEL client management by IGEL UMS
NCP-e VPN client (optional NCP-e licensing)
universal IPsec-Client
Genua GenuCard support (external USB hardware not included)
full management trough the IGEL UMS
profoundly management by the integrated Genua tool
connection buildup through the IGEL Thin Client
dial-in and hang-up, VPN connection buildup included
supports ADSL, LAN, EDGE, 3G and 4G connections
VS-NfD, NATO RESTRICED and RESTREINT UE authorized and certified

42. IGEL Security Features (Kerberos)
Pre-installed and ready to use
pure Kerberos-Ticket-Handling
based on
username and password
sophisticated „Two-Factor-Smartcard-Solutions“
Smartcard and PIN
through a „three-party-constellation“
IGEL Thin Client
Active Directory infrastructure
Kerberos enabled service (s.a. Citrix XenApp or XenDesktop)
with a sophisticated rules and rights rollout management across the network
on application level
for services
no local „Fake-Active-Directory“

43. IGEL Security Features (USB)
Pre-installed and ready to use
three different USB management solutions
IGEL USB-Management (basic function)
based on USB class, vendor/product-ID or by device UUID
very simplified access and denial mechanism
FabulaTech (extended function, requires optional server components from third party vendor)
based on protocols (RDP, Horizion View, Citrix)
features depend on used protocol
Drivelock Thin Client Suite (particular function, requires optional server components from third party vendor)
based on virtual protocols
across the protocol
user dependent USB management
enable a very high safety standard

44. IGEL Security Features
Pre-installed and ready to use
Smartcard support
individually adaptable IGEL Partitions)
IGEL Smartcard
Gemalto IDPrime
cryptas
SecMaker NetID
A.E.T. SafeSign
SafeNet Aladdin eToken
Smartcard reader support
 individually adaptable IGEL Partitions)
PC/SC Lite
M.U.S.C.L.E.
HID OMNIKEY
REINER SCT cyberjack

45. 3rd Party Software and IGEL Accessories

46. 3rd Party Software and IGEL Accessories
General benefits around IGEL
high flexibility relating to 3rd party solutions & customization
quick implementation
high degree of standardization

47. 3rd Party Database IGEL 3rd Party Database (Linux only)
contains round about 2500 different components
Categories are graphic cards, digital dictation, network adapters, smartcard reader, sound cards, touchscreens, webcams and Wi-Fi adapters (USB+PCI)
detailed information related to integrated driver
Shows level of driver verification with a traffic light system
GREEN: Hardware continuously verified through IGEL
YELLOW: Hardware successful tested by third-party
RED: Hardware unsuccessful tested
GREY: No test results available so far
Integrated customer feedback form
submit new test cases to extend the database
List of drivers is updated with every LX release

48. IGEL Accessories Connectivity-bar (UD3/IZ3 and UD5/6 series)
allows to modularly add ports
connectivity only to those devices where it is needed
= reduce investments - only where needed, with extended flexibility
Version
UD3
UD5
UD6
IZ3
Version 1 2x serial port 1x anti theft USB port X
Version 2 2x serial port 1x integrated Wi-Fi extension
Version 3 1x parallel port 1x anti theft USB port
Version 4 1x parallel port 1x integrated Wi-Fi extension

49. IGEL Accessories VESA-mount (UD2/UD3/UD5/UD6/IZ2/IZ3)
attached in a few seconds
ideal for space constrained environments
optimized cable management
UD3/IZ3 Connectivity bar attachable e.g. for Wi-Fi

50. IGEL Accessories Internal Smartcard Reader
factory-installed option for: UD3/IZ3, UD5/6, UD9
Factory-installed by default: UD10

51. Vertical Markets

52. Vertical Markets
IGEL understands the various vertical markets and integrates industry specific solutions as well as customized solutions
strong technical customer orientation towards different verticals
out-of-the-box integration for key solutions in these markets (s.a. digital dictation for healthcare)
high flexibility relating to 3rd party solutions & customization
quick implementation
high degree of standardization
reduce labor costs

53. Vertical Markets
IGEL Technology provides specialized account know-how to customers
Finance & Insurance
Transport & Logistics
Automotive
Healthcare
Retail
Government
How does IGEL understand this sectors?
Find some examples on next few slides…

54. Vertical Markets (Healthcare)
Example 1: Security and workplace optimization included
each x86-based IGEL Thin- and Zero-Client contains imprivata ProveID
optimized single sign-on solution developed for the healthcare-sector
every IGEL hard- and software solution (excl. UD10) supports imprivata ProveID
Windows integration through IGEL Partial Updates
fast and direct boot into the VDI session (Appliance Mode)
different authentication modes (s.a. RFID)
configure session roaming through imprivata appliance
digital dictation solution (only LX)
Grundig, Philips, Olympus
pre-installed in each IGEL Linux OS
3rd party database for reference

55. Vertical Markets (Logistic)
Example 2: Industry specific VDI solution meets ruggedized industry specific hardware
ERICOM PowerTerm
PowerTerm without additional license costs – incl. in every IGEL Universal Desktop device
pre-installed PowerTerm clients (Linux)
two different connection types: Terminal Emulator or WebConnect
easy configuration through local setup or UMS profile rollout
Industry PC device support
ADVANTECH DLoG - MTC6 (IGEL supported hardware)
Standardized endpoint devices to one operating system
convert 3rd-party-devices to IGEL software Thin Clients

56. Vertical Markets (Finance)
Example 3: Compliance meets high availability & efficiency
High Availability
enables company compliance standards like Basel II & III or HIPAA
high availability of data and resources (hence not mandatory for Thin Client boot)
UMS Server cluster with 2+ nodes
UMS Load Balancer: redundancy
Database (3rd party): Cluster support (Microsoft SQL and Oracle)
optimized and scheduled load balancing for large environments (500+ devices)
Universal MultiDisplay
trader workstations and multi monitor scenarios up to 8 HD displays
management and administration through the UMS
easy licensing and no special hardware required
Smartcard
extended company security through Single Sign-on features
broad range of integrated and pre-installed solutions (Reiner SCT, DATEV, etc.)

57. …more knowledge on technical details required?
…send an to