1. VMware VDI A Fresh Approach to Corporate Desktops
Ofir Zamir Senior Systems Engineer Israel & Turkey

2. VMware - The Power of Virtualization Pioneers
1998
Founded
Total Employees
Number of Users
Customer Profile
Certified Engineers
Market Cap
Market Share
Operating Structure
~ 4, %+ Engineers
6+ Million % in Production
100 of the Fortune 100
15,000+ VCP’s
$ 37+ Billion 300% + from IPO Day
~ 80+ %
Independent EMC Subsidiary

3. Four Core Solutions Enabled by VMware Infrastructure
& Capacity
Optimization
Business
Continuity
Workload Mobility
Disaster Recovery
and HA
Virtual SW
Lifecycle
Automation
Enterprise
Desktop
Solutions
VMware Infrastructure 3
VMware Converter
Virtual Center
Workstation
VDI
Let’s recap the most popular use cases for virtualization:
Infrastructure & Capacity Optimization (aka Server Consolidation) was an early use case for virtualization and remains one of the biggest drivers for adoption. Deploying multiple workloads on the same server means that companies can do more with less – less servers, less storage, less networking cables, less space in the datacenter, less power and cooling. This use case is applicable to the overwhelming majority of servers in the datacenter.
But increasingly companies find that virtualization represents a new way of thinking about business continuity in all its forms – ensuring high availability of critical applications as well as planning for a disaster or recovering from a disaster.
Virtualization also offers a lot of flexibility for managing the software lifecycle – from development, testing, QA, staging to production. These processes typically entail creating and maintaining multiple environment which now can be co-located on the same system. VMware offers capabilities to create libraries of these environments, and instantiate them as needed.
A new, and very exciting extension of virtualization beyond the datacenter is what we call Virtual Desktop Infrastructure – the capability to host end user desktops in the datacenter, and expose them to end users through a thin terminal. This allows companies to drastically decrease the cost of end-user desktops, and apply the same rigorous security and data protection available in the datacenter to end-user desktops.
VMFS
VMotion
DRS HA
VCB
Lab
Manager
ACE
ESX Server
Products
Copyright © 2006 VMware, Inc. All rights reserved. 3 3

4. VMware Desktop Product Line
Individually Administered Desktops
Managed Desktops
Free Virtual Machine
Run-Time
Desktop
Virtualization for Mac Users
Desktop
Virtualization for IT Professionals
Secure, Managed Desktop Virtualization
Server-Based Desktop
Virtualization
Player
Fusion
Workstation
ACE
VDI

5. VMware Virtual Desktop Solutions
Centralized Solution – VMware VDI
Virtual desktops run securely in a corporate data center
Remote PCs connect from any client.
Client-side Solution –VMware ACE
Users get a virtual desktop on portable media laptops.
Locked down VM with virtual disk encryption, device management & network access controls.

6. Agenda Challenges of Traditional PCs The VMware Desktop Solution
VMware VDI Product Update
Next Steps, Questions & Answers
Instead of jumping straight into products, features and functionality this presentation will start by looking at some of the problems that customers have with desktop computing; then how the VMware VDI solution maps to those problems. We will expand on the solution and then look at the VMware products, which compose the solution. Finally we will present some details about VMware VDM 2, as the newest product in the VMware desktop portfolio.

7. Challenges of Traditional PCs
User locked to device
(inflexible)
Data Security
Management
How does PC infrastructure typically work? Most organizations have centralized resources in the data centre (such as files, data, and policies around deploying applications and updates) and distributed PCs, which can download the data and run applications. There are lots of good things about this approach, such as managing policies and data centrally, the familiar experience of the desktop PC and isolation given by PCs (so if a user has a problem it doesn’t directly affect the rest of the business).
But there are also challenges.
[Click] Management of the distributed PCs can be difficult. This might include patching, deploying applications, providing support or provisioning PCs to new users (whether it is 1 new joiner or a group of new users, through an office move, outsourcing, acquisition or merger).
[Click] Data security can be difficult because files tend to be downloaded, duplicated and stored on hard drives of PCs. This is made worse if laptops or multi-user PCs are common. As well as the actual security data it is difficult to have a good understanding of the risks associated with insecure data, which complicated regulatory compliance such as SOX, Basel II and HIPAA.
[Click] The user is locked to the physical device. So often a user has to sit at the same physical PC to be able to access the applications and data required for the job. This can complicate organizational changes (MACs) and limit the user’s flexibility. In addition the corporate desktop image is often tied to the hardware; so changing either the build or the PC hardware involves a process of engineering and regression testing.
[Click] All of these things contribute to the operating cost of the desktops. And this is possibly the biggest pain point with maintaining the desktop.
Of course some of these might not be issues for a particular customer and any customer can probably add their own pain points.
Expensive

8. Challenges of Traditional PC
Top 5 Desktop Pain Points
VMware VDI Benefit
Cost
Reduce TCO by up to 40%
Lower administration and refresh costs
Security
No distributed data
VDI encrypted access to data centre
Management
(including patching)
Centralised in data centre
Compliant desktops, apps, patches & data
Forrester Research, Inc:
Virtualization On The Client, 21/11/07
Flexible Access
Access from any location
Users connect to the same VDI desktop
Rather than VMware tell you what your desktop problems are, here what customers report as their top desktop pain points. These data are from a recent survey by one of the analysts, and there are lots of other data available with very similar results. This will slide will allow a discussion about how VMware VDI addresses these pain points.
[Cost] VDI can reduce the cost of desktop computing by up to about 40%, later we will discuss this in more detail.
[Security] VDI is all about centralising desktop computing; desktops run in the data centre and user see a display of the desktop. This means that data and files never actually leave the data centre; no data are stored on distributed PCs. This make auditing and securing data more simple, and access controls can be implemented so that only authorised users can access sensitive segments within the data centre. Reducing the distribution of data makes risk analysis and regulatory compliance more straight forward.
[Management] Third pain point reported was management issues. Again by centralising the desktop in the data centre all operating systems, applications and data are managed centrally. VDI gives greater control of the desktop to the IT department and reduces the management requirements of the distributed infrastructure.
[Flexible Access] Customers report that they would like to provide flexible access to users. This might include accommodating user logons form multiple locations (including home) or organizational changes, such as providing desktop IT to new users or to new locations. It is easier to scale VDI upwards to meet demand, because it involves a linear scaling of services in the data centre. VMware VDI can automate provisioning new desktops and access can be quickly provided to any network connected location.
[Power] Power breaks down into three areas: cost savings, carbon savings and practicalities of providing more power and cooling into offices already at the limit. VDI enables a user to access a full desktop including all of the traditional applications and capabilities. Using VDI with thin clients transfers the power saving from the office to the data centre and gives an overall reduction. VDI can reduce power savings by up to 80%, which equates to a cost saving of about $120 / user / year, depending on circumstances. This is a carbon saving equal to covering 20% City of London in forest (= 66 football pitches = 15% Central Park, etc…).
These are some headlines and we will explore how the VDI solution addresses these pain points, but first let’s look at what VMware customers describe as the key benefits of VDI…
Reduced by up to 80%*
$59 - $164 / user / year on power saving
Power
*(Butler Group, “Infrastructure Virtualization”, September 2007).

9. Agenda Challenges of Desktop PC The VMware Desktop Solution
VMware VDI Product Update
Next Steps, Questions & Answers
So we’ve talked at high level about some of the issues experienced with traditional desktops. Now we will explore how the VDI solution works.

10. VMware VDI Overview Data Centre Management Data Security
Virtual desktops centrally managed and secured
Data Security
All data remains in data centre
User access from any client AND get familiar desktop
Virtualization Layer
At a high level VMware VDI is simple. Desktops run in the data centre and access is given to users over the network. This diagram shows a thin client connecting over the internet, but the clients could be PCs or laptops, running Windows, Linux or MAC and connecting from any location (internal or external). The desktops are secured and managed centrally.
[Click] Because desktops and applications are executed in the data centre, they can be managed centrally. This applies to all patching, application deployment, back-ups, data retention, monitoring and the provisioning of new desktops.
[Click] Data security is implicitly enhanced because files never leave the data centre. The centralised desktops can also be ring-fenced by firewalls. This means that clients have no direct access to data without secure authentication into the data centre.
[Click] and because the user can access the same centralised desktop over the network, they are not tied to specific clients or locations.
Virtualization is used to enable efficient running of the desktops within the data centre, which is represented by the blue virtualization layer in the diagram. The desktops are actually virtual desktops and the virtualization layer is VMware’s flagship product VI3 Enterprise.

11. VMware Virtualization Platform
Multiple operating systems on a single physical server
Shared pools of resources optimise infrastructure
I usually remove this slide for a high level desktop audience (they care about desktops, not VI). But if VI overview is required this level of details is often sufficient. Key point is VMware VI is the market lead for management and reliability.
26%
59%
Customer Commitment to VMware Platform
VMware exclusively
VMware favoured

12. How to think about Virtual Desktops
Partitioning
Multiple desktops on fully utilised server
Dynamically allocate resources
Automate and segment SLA
Isolation
Isolate faults within the virtual desktop
No application or user conflicts
Controlled data access
Encapsulation
Entire desktop state captured as file
Save as a snapshot in time
Back-up, restore and provision desktop with simple file copy
I also usually remove this slide for a high level desktop audience (they care about desktops, not VMs). But if VM overview is required this level of details is often sufficient. Key point is benefits of VMs for Desktops (not servers).
Let me present the key properties of virtualization and virtual desktops.
Explain partitioning.
Explain Isolation
Explain Encapsulation

13. Technical Benefits of Virtual Desktops
Distributed PC
Centralized SBC
VMware VDI
USER
App
Virtualization Layer
Apps
USER OS
App
App
App
App
App
App
App
USER
USER
USER
USER`
USER
USER
USER
Familiar user experience
Applications work as designed
User, app, OS and resource problems isolated
Centralised management
Server-class hardware
Secure data and applications
How do virtual desktops benefit compared to alternative desktop approaches?
[Click] Desktop PCs are good in many ways:
- Familiar and little training required
- Flexible in allowing user access to customise
- Most end-user applications are designed for desktop operating systems (such as XP or Vista)
- Isolated, in that any operations or failures on one PC do not typically affect other users.
But there are disadvantages:
- The PCs are difficult to manage and secure;
- Users are tied to specific devices and locations;
- Difficult to support remotely
- Difficult to provision new desktops or upgrade
[Click] Server based computing is also good – we like server based computing.
In SBC the applications are centralised:
- Centralized management
- Server-class h/w
- Data centre security.
Disadvantages come from the architecture of legacy technologies for SBC. Traditionally a single server operating system is used to host multiple users and multiple applications.
[Click] The terminal server must be locked-down to the point of be unfamiliar and difficult to use. Applications are not typically designed for multi-user operation: many conflict when multiple users try to run the same application and some will not work in this mode at all. If a user creates a problem such as overusing CPU or crashing the system, all users are affected. Because of these difficulties legacy SBC cannot usually be implemented for all users and all applications, which leaves a combination of distributed PCs and SBC – the worst of both worlds. If this animation gets too annoying a click will remove PC and SBC tiles.
[Click] VMware VDI runs desktops in the data centre. This gives the management and security benefits of centralising and still provides each user with a unique isolated desktop, familiar to the end user and able to run applications and systems management tools – because it is still a desktop operating system.
Slide animation shows that VMware VDI architecture is a much more stable platform for the user sessions and applications. If this animation gets too annoying a click will remove PC and SBC tiles.
In addition there are benefits unique to virtual desktops, such as the ease and speed of provisioning new desktops.
All of the PC and SBC benefits
Flexible provisioning and backup

14. Technical Benefits of Virtual Desktops
VMware VDI
VMware VDI
Isolation & Partitioning
Applications work as designed
Faults are isolated to the VM
Familiar PC experience
Centralized Hosting
Secure data, applications and operating systems
Grant and revoke access over the network
Virtualized
Simple clone, backup and restore of VMs
Suspend/Resume and power options
USER
App
Virtualization Layer
Apps
USER OS
All of the PC and SBC benefits
Flexible provisioning and backup

15. VMware VDI Infrastructure Overview
Clients
Data centre
VMware VI3 Platform
Hosted virtual desktops
VMware VDM 2
Manages connection from client to hosted desktop.
Internet Access
DMZ
VMware VDI is built on virtual desktops running on the VMware VI3 platform. This can include the many advanced features of VI3, such as VMHA, DRS and VMotion.
[Click]
VMware VDM is a component of VMware VDI which is installed on servers (or virtual servers) in the data centre.
VMware VDM connects clients to the virtual desktops. This process is generically known as connection brokering. The logic controlling which virtual desktop a client should connect to is handled by VMware VDM. This makes the process of connecting to VMware VDI simple for the end user and tightly controlled for the IT administrator.
VMware VDM is integrated with Active Directory. Users are able to authenticate to VMware VDM using the same credentials used to logon to a physical PC in the corporate domain. There is no complex configuration to setup this integration and all user accounts remain in the Active Directory. This means that there is no need to change standard procedures for creating passwords, setting permissions or resetting passwords (i.e. no need to re-train the helpdesk). When the user has authenticated they will be seamlessly logged on to the virtual desktop, this is called single sign-on (SSO).
VMware VDM is tightly integrated with VMware VirtualCenter. VDM is able to interact with VirtualCenter to control the VI3 platform. For example VDM can suspend a virtual desktop if a user logs off and resume the desktop when the user reconnects. VMware VDM is able to create new virtual desktops from template on-demand and then delete the virtual desktop when it is no longer required.
VMware VDM 2 can be configured across a DMZ to provide secure access from un-trusted networks (such as the Internet). The VDM Security Server can be installed in the DMZ, isolated from the internal network, and proxy connections to the VDM Connection Server. The VDM Security Server also encrypts the data stream between the virtual desktops and the clients so that users can securely access sensitive data. The data itself never leaves the data centre.
VMware VDI includes VMware VDM 2, VMware VI3 and VMware VirtualCenter.
VMware VirtualCenter
VDM manages the VI3 platform
Active Directory

16. Agenda Challenges of Desktop PC The VMware Desktop Solution
VMware VDI Product Update
Next Steps, Questions & Answers
A presentation of key features of VDM will follow.

17. VMware VDM Individual Desktops
Individual Users
Individual Desktops
Unique Virtual Machines
User gets a dedicated desktop
VM is only ever assigned to single user
‘Power user’ use case
Unique VM configuration
Unique resource allocations
Often admin privileges
There are three types of desktop assignment in VMware VDM 2.
Individual Desktops:
This is a static relationship between a user and a specific virtual desktop. This can be a good configuration for power users, where the desktop is specifically configured for a particular user. This can include specific applications, data access and resource (e.g. RAM) allocations. Individual Desktops give a high degree of customization for the user.

18. VMware VDM Non-Persistent Pools
Non-Persistent Desktop
Identical Virtual Machines
Group of Users
Simple entitlement scheme
Cloned from same template
Desktop allocation to any desktop in pool
Desktop returned to pool for re-allocation
‘Standardised user’ use case
Common VM configuration
Common resource allocations
Could be locked down
Efficient use of VMs
Non-Persistent Pools:
The non-persistent pool also contains multiple hosted virtual desktops, which are initially identical and cloned from the same template. The VDM Connection Server will allocate entitled users to a virtual desktop from the non-persistent pool, on request. This allocation is not retained when the user logs off the desktop and the virtual desktop is placed back into the non-persistent pool for re-allocation to other entitled users. When the user logs on to the non-persistent pool on subsequent occasions, the VDM Connection Server will connect the user to any virtual desktop in the non-persistent pool [Click].
Non-Persistent Pools provide the most efficient many-2-many configuration. Simple automated mechanisms for cloning and deploying the virtual desktops reduce initial effort and the virtual desktops are re-used by many different users. Non-Persistent Pools are a good solution for hoteling shift workers.

19. VMware VDM Non-Persistent Pools
Non-Persistent Desktop
Identical Virtual Machines
Group of Users
Simple entitlement scheme
Cloned from same template
Desktop allocation to any desktop in pool
Desktop returned to pool for re-allocation
‘Standardised user’ use case
Common VM configuration
Common resource allocations
Could be locked down
Efficient use of VMs
Non-Persistent Pools:
The non-persistent pool also contains multiple hosted virtual desktops, which are initially identical and cloned from the same template. The VDM Connection Server will allocate entitled users to a virtual desktop from the non-persistent pool, on request. This allocation is not retained when the user logs off the desktop and the virtual desktop is placed back into the non-persistent pool for re-allocation to other entitled users. When the user logs on to the non-persistent pool on subsequent occasions, the VDM Connection Server will connect the user to any virtual desktop in the non-persistent pool [Click].
Non-Persistent Pools provide the most efficient many-2-many configuration. Simple automated mechanisms for cloning and deploying the virtual desktops reduce initial effort and the virtual desktops are re-used by many different users. Non-Persistent Pools are a good solution for hoteling shift workers.

20. VMware VDM Persistent Pools
Configurable Virtual Machines
Group of Users
Persistent Desktop
Simple entitlement scheme
Cloned from same template
Desktop allocation to any desktop in pool
Dedicated desktop for subsequent connections
‘Knowledge user’ use case
Simple to configure, provision and maintain
Rich user experience
User can personalize
Persistent Pools:
The persistent pool contains multiple hosted virtual desktops, which are initially identical and cloned from the same template. This is typically a many-2-many relationship. When a group of users is entitled to the persistent pool, every user in the group is entitled to any of the virtual desktops in the pool. The VDM Connection Server will allocate users to a virtual desktop, as requested. This allocation is retained for subsequent connections. When the user connects to the persistent pool on subsequent occasions, the VDM Connection Server will connect the user to the same virtual desktop that they were initially allocated.
Persistent Pools provide a simple automated mechanism for initial cloning and deployment of the virtual desktops but allows the users to customize their desktop in a personal way. The initial administration effort is less than with Individual Desktops, because only a single template and entitlement is required to provision a virtual desktop for every user in a large group.

21. VMware VDM Provisioning and Management
Pool of VMs based on single template
“We could provide a workstation to any client, in any seat, at any office in the world… in just 8 minutes.”
Frank Sabatelli Director of Virtual Technology Infrastructure
VMware VDM
Automated provisioning from clones
Suspend, power down, reboot or delete on logoff
Template
VMware VirtualCenter
Resume, power on or clone from template on re-connect
VDM and VirtualCenter are integrated and can automate many management task of the virtual desktop infrastructure.
For example, [Click] VDM can recognise when there are no desktops available for users and dynamically create new desktops in a pool by cloning templates. This functionality is configured in advance.
When the green user logs of from the system [click] VDM can suspend the desktop to conserve system resources. [Click] and when the user reconnects, VDM is able to resume the desktop on demand. This gives a true concurrency model, which means hard ware and some software licensing can be scaled to concurrent usage.

22. VMware VDM Feature Overview
Automated provisioning and desktop management
SSL encryption of connections
USB redirection
Active Directory and SecurID integration
High availability and scalable
DMZ support
Windows, MAC, Linux, Thin Client support
Integrated with VMware VI3
Here is a summery of some key features of VDM 2.

23. VMware VDI Summary VMware VDI Solution VMware VDI Benefits
Centralise Desktop Management
Provide Access over the Network
Familiar PC Experience
VMware VDI Benefits
Reduce Desktop Costs
Increase Desktop Security
Increased Desktop Management
Increased User Flexibility

24. Market View of VMware VDI
“Virtualization is the most important technology to hit the corporate PC space since the thin client.”
Forrester “Desktop Virtualization is the Future of the Corporate PC”, January 5, 2006
“It's [VDI] really become our new model for doing desktop deployment. If a user doesn‘t demand they need a desktop, we're giving them a hosted desktop, and the users love it.”
David Siles Chief Technology Officer Kane County Government
Some testimonials.
“From which vendors do you plan to purchase thin client/desktop virtualization technology from over the next 6-12 months? (please indicate all that apply) “
Answer: VMware 58%, Citrix 16%, HP 7%, Microsoft 6%, Not applicable / Unsure 14%
Source: Merrill Lynch CIO Survey, April 2007

26. Questions and Answers Thank you!
Please use the chat window to ask the question

27. VMware VDI A Fresh Approach to Corporate Desktops
Ofir Zamir Senior Systems Engineer Israel & Turkey