«

»

Dec 05 2011

PCoIP Zero Clients with Imprivata OneSign Authentication and USB2.0

Teradici is releasing today a new version (3.5.0) of the PCoIP Zero Client firmware. This new version provides major security and functionality enhancements. Teradici itself is calling it the biggest PCoIP release to this data.

  • Imprivata OneSign authentication – Secure single sign-on authentication facilitates increased productivity for roaming desktop users
  • Improved USB transfer rates with VDI (USB2.0) – Users can expect to see up to 3X improvement in transfer speeds
  • 802.1X network authentication – PCoIP zero client devices can now be deployed with the highest degree of 802.1X security using EAP-TLS certificate-based authentication.
  • IPv6 support – PCoIP zero clients updated to support ongoing mandates for IPv6 adherence.
  • “Help Desk” mode – Administrators can enable an OSD login screen link which allows users to log in to a particular VM of the administrator’s choice. This VM may be configured by the administrator to provide specific support directions for users
  • Support for up to 25 View Connection Server addresses – Adds additional flexibility and scalability for large enterprises.
  • 100BASE-FX – Support for fast Ethernet over optical fiber for enhanced security over long distances
    Along with the new features Teradici is also releasing a new version of the PCoIP Management Console, version 1.7.0.

Note that the enhancements are only available for the hardware based Teradici PCoIP Zero client. The soft version provided by VMware with VMware View does not currently support the enhancements above.

 

Imprivata OneSign authentication

According to my previous experiences many organizations, specially healthcare providers, have been waiting for the ability to utilize Imprivata SSO with with tap of a proximity card with zero clients to enable true follow me virtual desktop roaming.

image

 

Improved USB transfer rates with VDI (USB2.0)

The USB 2.0 Compatibility support is also a huge plus for VDI users. Teradici told me that users can expect to see up to 3x improvement in transfer speed for bulk transfers (read and write) when compared to earlier PCoIP zero client firmware releases (which supported USB 1.1 transfer speeds with many USB 2.0 devices). This means up to 18Mbps may be achieved, but the results may vary for different USB devices and under different network conditions.

 

802.1X network authentication

802.1X is an IEEE Standard for port-based Network Access Control (PNAC) and adds an additional layer of security on top of usernames and passwords, particularly for sensitive network environments. EAP-TLS (certificate-based) is supported – which is the most secure method of 802.1X authentication.

  1. Supplicant sends certificate to Authenticator (ie network switch)
  2. Authenticator forwards certificate to Authentication Server for verification
  3. Authenticator grants or denies network access based on response from Authentication Server.

image

 

In a following post I will explain how to setup the Imprivata OneSign authentication. However, the new firmware is already available for download at Teradici Support website. Go to www.teradici.com for more Information.

Similar Posts:

Permanent link to this article: http://myvirtualcloud.net/?p=2520

5 comments

Skip to comment form

  1. Simon

    Thanks for sharing some details about the USB 3.0 speed.
    But is it really possible with a old zero-client like the Wyse P20 or the newer EVGA PD-02?
    They have only USB 1.1 ports…

  2. Gunnar

    That’s where you are wrong, the “old” zero clients actually have USB 2.0 ports they just never had the firmware code setup to support 2.0 speeds. @gunnarwb

    http://communities.vmware.com/people/gunnarb/blog/2011/12/05/teradici-firmware-35–usb20-imprivata-sso-8021x-ipv6-holy-crap

  3. Simon

    That are great news Gunnar! Wyse told me that they have only USB 1.1 ports in the Wyse P20, I will check this with the new firmware.

    (there is a typo in my first posting, I mean USB 2.0 not 3.0)

  4. Constantin

    I hoped they will also increase the max configurable usb devices. But noo :-(
    Still can only add 10 USB devices for authorisation for one group.

    But instead cool features.

  5. Andre Leibovici

    @Gunnar
    Thanks for responding to the questions. I know you used to work for Teradici.

    Andre

Leave a Reply