Technical USPs and advantages around IGELs product portfolio

Technical USPs and advantages around IGEL´s product portfolio 2016 Q 1 Gerhard Setzmüller Product Marketing

Agenda ► IGEL Management Software – Universal Management Suite (UMS) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 2

Agenda ► IGEL Operating Systems – IGEL Universal Desktop (UD) • Linux v 5 (LX) – Protection against tampering • Windows Embedded Standard 7 (W 7 and W 7+) – IGEL Zero Clients (IZ) • ARM devices (Citrix, Microsoft) • x 86 devices (Citrix, Microsoft, VMware) – Universal Desktop Converter 2 (UDC 2) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 3

Agenda ► Functional Extensions (optional/additional costs) – Universal Customization Builder (UCB) – High Availability Extension (HA) – Universal Multi. Display (UMD) – Shared Work. Place (SWP) – Multimedia Codec Pack (MCP) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 4

Agenda ► Integrated Security Features – – VPN solutions Kerberos USB management Single Sign-On • Smartcard Readers • Smartcards IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 5

Agenda ► 3 rd Party Hardware Support and IGEL Options – – 3 rd Party Hardware Database Connectivity-Foot Integrated Smartcard Reader VESA mount IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 6

Agenda ► Vertical Markets – Exemplary solutions for dedicated verticals IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 7

IGEL Management Software

IGEL Software USPs ► Advantages around the UMS – leading Thin Client management software solution – included and delivered with every IGEL Thin/Zero/Soft Client without additional costs – uniform UI with standardized look & feel – quick implementation – high degree of standardization – high flexibility relating to 3 rd party solutions & customization = saves money and reduces fixed and variable IT costs IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 9

Universal Management Suite • Unified management – only one tool to manage all IGEL operating systems • LX, UDC 2, IZ and WES (W 7 and W 7+) • manages converted 3 rd party devices – common profiles based on IGEL meta language • this „meta-translator“ only roll out the required parameters which are available on the target system – general and easy to operate user interface • UMS = local device setup the same awesome UI IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 10

Universal Management Suite • SSL based communication – each Thin Client that connects to the UMS receives and stores a public key • as of now the whole traffic and the communication between the client and the UMS is based on SSL encryption • certificate-based encrypted communication – protects against DDo. S attacks – protects against man-in-the-middle attacks – HTTPS based communication between • UMS console (admin client) and UMS server over TCP port 8443 IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 11

Universal Management Suite • Basic configuration and rollout without any scripting – set all parameters without any scripting knowledge or text file editing • Linux and Windows – customization through user friendly and uniform UI with standardized look & feel • both in the UMS (profiles) and within the local device setup across all IGEL OSes – UD/IZ (LX) – UDC 2 – WES (W 7 and W 7+) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 12

Universal Management Suite • UMS Views – easy Thin Client query through uniform and user friendly wizard – combine criterions with operators to achieve best results IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 13

Universal Management Suite • Automatic client configuration – uses AND/OR logic operators on predefined criterions – relational operators: not like, equal to, greater than, less than – up to seven criterions to combine • MAC-address, last known IP address, name, network name, product name, product ID, firmware version, netmask – combine criterions and operators to complex rule sets – each rule set can define its own default directory IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 14

Universal Management Suite • UMS Administrator – System configuration backups – Certificate management IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 15

IGEL OSes

IGEL Operating System USP´s ► Advantages around the IGEL operating systems – management software always included for free (UD/IZ and UDC 2) • centralized management – hardware warranty up to 5 years without any additional costs (except UD 9, UD 10 and IZ) – free software updates during product lifecycle and 3 years additional software maintenance after EOL – uniform UI with standardized look & feel across OSes – OS independent, common profiles – quick implementation – high degree of standardization – high flexibility relating to 3 rd party solutions & customization IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 17

Universal Desktop (LX v 5) • IGEL Partitions – this function allows to turn pre-installed features on or off • s. a. Citrix Receiver, Thin. Print, and so on… • similar to Windows Features and so on… Base OS imprivata partition Thin. Print partition IGEL Technology | Desktop VMware partition Gerhard Setzmüller | Product Marketing | Page 18 ICA partition

Universal Desktop (LX v 5) • Protection against tampering and extended system security during the update process – the update- and boot- mechanism uses a hash value check, whether the partition has been modified • if there is a modified critical partition - the device will not boot • there are two different critical partitions existing on the system - system partition - user partition • if there is a modified uncritical partition – the device will boot, but only the affected part will be deactivated and the scope of function is restricted • apart from the two critical partitions all other partitions are considered as uncritical IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 19

Universal Management Suite 4 • Fail-Safe firmware update - particularly secure Thin Client management • firmware updates always finish completely - the device always keeps running - the device always stays bootable - update process without critical phases - critical updates always processed by two phases IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 20

Fail-Safe Firmware Update Process Start Update If Update failed Reboot Update OK Reboot UD Firmware 1 Free Space (UD Firmware 1) UD Firmware 2 (Incomplete) UD Firmware 2 (Complete) Free Space Update starts again IGEL Technology | Free Space Start new system Gerhard Setzmüller | Product Marketing | Page 21

Universal Desktop • Benefits of IGEL Partitions – firmware customization on customer side • • • size the firmware down to basic functions minimize the lines of active code extend the system performance – flash medium cannot be mounted on any other device • • • IGEL uses its own partitioning system IGEL partitions are compressed, thus data is obfuscated checksums of IGEL partitions avoid loading of modified code – configuration is written to a dedicated and compressed partition IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 22

Universal Desktop (LX v 5) • Buddy Updates (similar to Microsoft Branch. Cache) – Each IGEL Thin/Zero Client, which received a firmware update by the UMS, can be an update server for the other defined devices on a dedicated branch network. Benefits: – Send a firmware one time to update many clients – Results in a bandwidth reduction (WAN/LAN) – Quickly distribute firmware releases in a WAN environment IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 23

Universal Desktop (LX v 5) • Buddy Update process (similar to Microsoft Branch. Cache) Headquarter – Datacenter Branch Office LAN Buddies LAN WAN Buddy Server Update Server IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 24 Buddies

Universal Desktop Converter 2 • Converts most of x 86 based hardware – extends the life of old/depreciated desktop hardware – standardization of desktop operating systems on PCs and thin clients – enables the step-by-step introduction of SBC and VDI (virtual desktops) • Centralized remote management – management software (UMS) included for free • Based on IGEL Universal Desktop Firmware (Linux v 5) – UD and UDC 2 share the same set of features • Broad range of pre-installed clients for VDI and SBC access – from Citrix to VMware (more than 15 clients) • Three different operating modes – installation on a device (removes previous OS) – boot UDC from a USB stick – run UDC in a virtual machine (works with standard hypervisors) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 25

Universal Desktop Converter 2 • Comprehensive hardware- and 3 rd party device support – firmware integrated drivers • to support broad range of x 86 -compatible hardware • detailed driver information available on 3 rd party hardware DB – IGEL supported devices • • Acer: Veriton N 260 G / N 281 G / N 2110 G Advantech-DLo. G: MTC 6 DELL / Wyse: C 90 LE / C 90 LEW / D 10 D / D 50 D / R 50 L / Z 50 D Fujitsu: Futro S 500 / S 550 -2 / S 700 / S 720 / S 900 / S 920 HP: t 5545 / t 5565 / t 5630 w / t 5730 / t 5735 / t 5745 / t 510 / t 520 / t 610 / t 620 / t 820 Lenovo: M 32 Samsung: TC 190 / TC 240 – drives are added and updated continuously with every FW release IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 26

Universal Desktop (WES) (based on Windows Embedded) • Recognized industry standard – Windows Embedded Standard 7 • Genuine RDP/RDS support (currently version 8. 1) • WES and Linux share common UMS profiles – operating system specific parameters are simply ignored if unavailable • Pre-installed and IGEL verified software components – smartcard driver, VPN, etc. • IGEL Partial Update – – firmware customization at customer site fully integrated in UCB framework optimizes roll out of windows hotfixes and additional software saves bandwidth (WAN and LAN) • no need to deploy a complete system snapshot, delivers only the changed parts IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 27

Universal Desktop (WES) (based on Windows Embedded) • Embedded Linux management – manages the WES system in an update or emergency case – manages the device through the embedded Linux, if it boots not correctly • File Based Write Filter (FBWF) – security standard similar to Linux – the user has the option to deactivate • enables the Windows OS customization – install drivers and applications • Microsoft domain join can be managed completely by the UMS IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 28

Zero Clients • Specialized zero clients – Citrix HDX, Remote. FX or Horizon View – based on IGEL Linux (x 86) • No typical zero client limitations – updates available, management through UMS, technical support • Choice between desktop- or appliance mode – very fast and direct boot into the respective VDI session • Zero Touch deployment – profile based configuration – reduces the desktop management • management through the free included IGEL management solution (UMS) • Future proof, investment protection and software subscription for free – IGEL UD-Upgrade-License • upgrade path to Universal Desktop environment • further use of the same hardware IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 29

Remote. FX • IGEL is the first and only vendor of Linux based and dedicated Microsoft Remote. FX hardware platforms worldwide. IGEL Zero Client IZ 2 and IZ 3 RFX IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 30

Functional Extensions (optional/additional costs)

Functional Extensions (optional/additional costs) ► General benefits regarding all optional features – seamless integration into the free included IGEL management software – customization at customer site • no depending to the client vendor – – – = extend the productivity enhance the basic functions to an enterprise solution uniform UI with standardized look & feel across the OSes quick implementation high degree of standardization 1. enables company compliance standards 2. enhances the company security level 3. enhances the efficiency IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 32

Universal Management Suite • Universal Customization Builder (UCB) (optional/additional costs) – adjusts firmware at costumer site • generating, packing and rolling out firmware expansion packages – no need of detailed Shell- or Windows scripting knowledge – user-friendly GUI with the familiar look and feel of the IGEL UMS automatic syntax check • packs the components to get along with Linux and WES standards • available for IGEL Universal Desktop – Linux (Custom Partition) – WES (Partial Updates) • reduces the bandwidth: only deliver a specific part of the firmware, never roll out the whole image • – predefined templates and UCB support trough IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 33

UCB • Firmware customization made easy: IGEL Custom Partition (LX) and Partial Update (WES) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 34

Universal Management Suite • High Availability Extension (HA) (optional UMS extension/additional costs) – two or several UMS-Server within the network (2+) • redundancy or scaling • automatic failover mechanism – integrated Load Balancer • independent simultaneous booting processes • especially developed for larger environments (500+) • can also be used as a redundant system – supported database-clusters • Oracle DB (11 g or higher) • Microsoft SQL Server (2008 or higher) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 35

Universal Multi. Display (UMD) • Multi display scenarios (up to max. 8 screens) (optional/ UMS feature/additional costs) – add new satellites and enhance the environment • Master and satellites with HD resolution – UD 5/6 max. : 2560 x 1600 pixel (master & satellite) – – UD 2 max. : 1920 x 1200 pixel (satellite) UD 3 max. : 1920 x 1200 pixel (satellite) UD 9 max. : 1920 x 1080 pixel (satellite) UD 10 max. : 2560 x 1600 pixel (satellite) • Management trough UMS – centralized – easy to configure and to use – quick implementation IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 36

Shared Work. Place (SWP) • User-dependent profile configuration (optional UMS feature/additional costs) – based on centralized user setting profiles • s. a. mouse settings, keyboard layout, wallpaper, and more • Especially developed for larger infrastructure environments – Roaming environments like call center or shift workplaces • • Hospital Airport Checkout Reception • Centralized management trough UMS – mixed environment possible IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 37

Multimedia Codec Pack (MCP) • Audio and video rendering on client side (optional feature/additional costs) • Supported protocols – – – – gstreamer (local media player) multimedia content in the local browser (attention: no pre-installed Flash!) Citrix HDX multimedia redirection Citrix H. 264 Deep Compression Codec Microsoft RDP multimedia redirection Microsoft Remote. FX 8 video optimized v. Workspace Multimedia Redirection • Supported audio and video files – x 86 -software acceleration • MP 3, WMV (VC 1), H 264, WMA, MPEG-4, MPEG-2 IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 38

Integrated Security Features

Integrated Security Features ► Advantages around the security features – extends the company security level – manage all integrated security features through only one centralized management tool – uniform UI with standardized look & feel overall OS – quick implementation – pre-installed frontend clients, without additional license costs = enhance the company security and reduce fixed and variable IT costs IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 40

IGEL Security Features (VPN) • Pre-installed and ready to use – Open. VPN (starting 5. 07. 100) • VPN based IGEL client management by IGEL UMS – NCP-e VPN client (optional NCP-e licensing) • universal IPsec-Client – Genua Genu. Card support (external USB hardware not included) • full management trough the IGEL UMS – profoundly management by the integrated Genua tool • connection buildup through the IGEL Thin Client – dial-in and hang-up, VPN connection buildup included – supports ADSL, LAN, EDGE, 3 G and 4 G connections • VS-Nf. D, NATO RESTRICED and RESTREINT UE authorized and certified IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 41

IGEL Security Features (Kerberos) • Pre-installed and ready to use – pure Kerberos-Ticket-Handling • based on - username and password - sophisticated „Two-Factor-Smartcard-Solutions“ • Smartcard and PIN • through a „three-party-constellation“ 1. IGEL Thin Client 2. Active Directory infrastructure 3. Kerberos enabled service (s. a. Citrix Xen. App or Xen. Desktop) • with a sophisticated rules and rights rollout management across the network - on application level - for services – no local „Fake-Active-Directory“ IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 42

IGEL Security Features (USB) • Pre-installed and ready to use – three different USB management solutions • IGEL USB-Management (basic function) – based on USB class, vendor/product-ID or by device UUID – very simplified access and denial mechanism • Fabula. Tech (extended function, requires optional server components from third party vendor) – based on protocols (RDP, Horizion View, Citrix) – features depend on used protocol • Drivelock Thin Client Suite (particular function, requires optional server components from third party vendor) – – IGEL Technology | based on virtual protocols across the protocol user dependent USB management enable a very high safety standard Gerhard Setzmüller | Product Marketing | Page 43

IGEL Security Features • Pre-installed and ready to use – Smartcard support • individually adaptable (look @ IGEL Partitions) – – – IGEL Smartcard Gemalto IDPrime cryptas Sec. Maker Net. ID A. E. T. Safe. Sign Safe. Net Aladdin e. Token – Smartcard reader support • individually adaptable (look @ IGEL Partitions) – – IGEL Technology | PC/SC Lite M. U. S. C. L. E. HID OMNIKEY REINER SCT cyberjack Gerhard Setzmüller | Product Marketing | Page 44

3 rd Party Software and IGEL Accessories

3 rd Party Software and IGEL Accessories ► General benefits around IGEL – high flexibility relating to 3 rd party solutions & customization – quick implementation – high degree of standardization IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 46

3 rd Party Database • IGEL 3 rd Party Database (Linux only) – contains round about 2500 different components • Categories are graphic cards, digital dictation, network adapters, smartcard reader, sound cards, touchscreens, webcams and Wi-Fi adapters (USB+PCI) – detailed information related to integrated driver • Shows level of driver verification with a traffic light system – – GREEN: Hardware continuously verified through IGEL YELLOW: Hardware successful tested by third-party RED: Hardware unsuccessful tested GREY: No test results available so far • Integrated customer feedback form – submit new test cases to extend the database – List of drivers is updated with every LX release IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 47

IGEL Accessories • Connectivity-bar (UD 3/IZ 3 and UD 5/6 series) – allows to modularly add ports – connectivity only to those devices where it is needed = reduce investments - only where needed, with extended flexibility Version UD 3 UD 5 UD 6 IZ 3 Version 1 2 x serial port 1 x anti theft USB port X X Version 2 2 x serial port 1 x integrated Wi-Fi extension X X Version 3 1 x parallel port 1 x anti theft USB port X X Version 4 1 x parallel port 1 x integrated Wi-Fi extension X X IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 48

IGEL Accessories • VESA-mount (UD 2/UD 3/UD 5/UD 6/IZ 2/IZ 3) – – attached in a few seconds ideal for space constrained environments optimized cable management UD 3/IZ 3 Connectivity bar attachable e. g. for Wi-Fi IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 49

IGEL Accessories • Internal Smartcard Reader – factory-installed option for: UD 3/IZ 3, UD 5/6, UD 9 – Factory-installed by default: UD 10 IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 50

Vertical Markets

Vertical Markets ► IGEL understands the various vertical markets and integrates industry specific solutions as well as customized solutions – strong technical customer orientation towards different verticals – out-of-the-box integration for key solutions in these markets (s. a. digital dictation for healthcare) – high flexibility relating to 3 rd party solutions & customization – quick implementation – high degree of standardization – reduce labor costs IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 52

Vertical Markets • IGEL Technology provides specialized account know-how to customers - Finance & Insurance - Transport & Logistics - Automotive - Healthcare - Retail - Government How does IGEL understand this sectors? Find some examples on next few slides… IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 53

Vertical Markets (Healthcare) Example 1: Security and workplace optimization included • each x 86 -based IGEL Thin- and Zero-Client contains imprivata Prove. ID - • optimized single sign-on solution developed for the healthcare-sector every IGEL hard- and software solution (excl. UD 10) supports imprivata Prove. ID Windows integration through IGEL Partial Updates fast and direct boot into the VDI session (Appliance Mode) different authentication modes (s. a. RFID) configure session roaming through imprivata appliance digital dictation solution (only LX) - Grundig, Philips, Olympus pre-installed in each IGEL Linux OS 3 rd party database for reference Windows integration through IGEL Partial Updates IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 54

Vertical Markets (Logistic) Example 2: Industry specific VDI solution meets ruggedized industry specific hardware • ERICOM Power. Term - • Power. Term without additional license costs – incl. in every IGEL Universal Desktop device pre-installed Power. Term clients (Linux) two different connection types: Terminal Emulator or Web. Connect easy configuration through local setup or UMS profile rollout Industry PC device support - ADVANTECH DLo. G - MTC 6 (IGEL supported hardware) - Standardized endpoint devices to one operating system • convert 3 rd-party-devices to IGEL software Thin Clients IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 55

Vertical Markets (Finance) Example 3: Compliance meets high availability & efficiency • High Availability - - • Universal Multi. Display - • enables company compliance standards like Basel II & III or HIPAA high availability of data and resources (hence not mandatory for Thin Client boot) • UMS Server cluster with 2+ nodes • UMS Load Balancer: redundancy • Database (3 rd party): Cluster support (Microsoft SQL and Oracle) optimized and scheduled load balancing for large environments (500+ devices) trader workstations and multi monitor scenarios up to 8 HD displays management and administration through the UMS easy licensing and no special hardware required Smartcard - extended company security through Single Sign-on features broad range of integrated and pre-installed solutions (Reiner SCT, DATEV, etc. ) IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 56

…more knowledge on technical details required? …send an email to setzmueller@igel. com IGEL Technology | Gerhard Setzmüller | Product Marketing | Page 57

Thank you Questions?