Smartcard-based protection
Highly secure access to data and applications
ECOS SecureBootStick FX
The ECOS SecureBootStick® FX enables companies to use private and third-party PCs for secure remote access without compromising their security requirements. Centralized management simplifies administration and helps reduce operating costs while providing a convenient user experience.
Smartcard-based protection offers highly secure access to data and applications. The Secure Boot Stick FX features numerous hardware-embedded security elements, an integrated smartcard, and a built-in pinpad for entering the PIN directly on the SBS. All encryption and security processes are managed via the smartcard.
How the Secure Boot Stick FX works
Step-by-step
- Connect the SBS FX to a PC or Mac and power it on.
- The ECOS Secure Linux operating system boots automatically.
The local hard disk remains deactivated. - Enter your PIN on the integrated pinpad and connect to your usual working environment.
- Log in and get started securely.
- RDP client, Citrix Workspace app (previously Citrix Receiver), VMware Horizon via RDP, PCoIP, BLAST, Firefox, Chromium, VPN client for IPsec
- Citrix HDX RealTime Media Engine to optimize audio and video transmission for Skype for Business and Microsoft Teams
- Microsoft RemoteFX for optimizing audio quality in conjunction with RDP
- Profiles for accessing various applications/servers at user, group or role level
- Use of local resources after approval (external USB storage devices, local printers)
- Authorization assignment for external devices linked to manufacturer ID or serial number of the device
- Remote update of all applications and firmware
- Integrated smart card reader for cards in ID-000 format
- Compatible with all common 64-bit PCs, largely with Intel-based Macs and tablets with x86 architecture
- UEFI Secure Boot support
- Keyboard drivers for more than 90 languages and countries
- Multi-monitor support
- Connection via LAN, WLAN, UMTS, LTE incl. browser for logging into the HotSpot
- Software in German and English (can be preset)
- Write-protected and signed partitions for boot loader and kernel
- Encryption via hardware of all security-relevant partitions
- Write-protected and signed partition for firmware and applications
- Writable partition for storing user parameters
- Hardened ECOS Secure Linux operating system
- Digitally signed boot loader, firmware and applications with validation in Chain-of-Trust
- Protection of all processes via smartcard, e.g. easy enrollment, logging on to the gateway, updating the SBS
- Integrated firewall to protect against attacks in the same network and block ping requests
- Encryption of RAM contents down to the program code to be executed
- VM Start Detection prevents use in a virtual environment
- Fingerprinting of the guest computer including peripherals
- Instant logout when unplugging the SBS
- Secured process for updating firmware and applications with integrity check and correct update server