Multi-factor authentication with your ID cards or badges
ECOS SecureBootStick GX
The ECOS SecureBootStick® GX provides security-conscious organizations with maximum-security access to terminal servers, virtual desktop infrastructures, and web applications – all from a secure and fully encapsulated environment.
It also serves as a strong multi-factor authentication device. With its ID-1 card slot, the GX enables the use of PKI cards, ID cards, or service cards for secure user authentication.
- RDP client, Citrix Workspace app (previously Citrix Receiver), VMware Horizon via RDP, PCoIP, BLAST, Firefox, Chromium, VPN client for IPsec
- Citrix HDX RealTime Media Engine to optimize audio and video transmission for Skype for Business and Microsoft Teams
- Microsoft RemoteFX for optimizing audio quality in conjunction with RDP
- Profiles for accessing various applications/servers at user, group or role level
- Use of local resources after approval (external USB storage devices, local printers)
- Authorization assignment for external devices linked to manufacturer ID or serial number of the device
- Remote update of all applications and firmware
- Integrated smart card reader for PKI cards with CardOS 5.X in ID-1 format
- Compatible with all common 64-bit PCs, largely with Intel-based Macs and tablets with x86 architecture
- UEFI Secure Boot support
- Keyboard drivers for more than 90 languages and countries
- Multi-monitor support
- Connection via LAN, WLAN, UMTS, LTE incl. browser for logging into the HotSpot
- Software in German and English (can be preset)
- Write-protected and signed partitions for boot loader and kernel
- Encryption via hardware of all security-relevant partitions
- Write-protected and signed partition for firmware and applications
- Writable partition for storing user parameters
- Hardened ECOS Secure Linux operating system
- Digitally signed boot loader, firmware and applications with validation in Chain-of-Trust
- Protection of all processes via smartcard, e.g. easy enrollment, logging on to the gateway, updating the SBS
- Integrated firewall to protect against attacks in the same network and block ping requests
- Encryption of RAM contents down to the program code to be executed
- VM Start Detection prevents use in a virtual environment
- Fingerprinting of the guest computer including peripherals
- Instant logout when unplugging the SBS
- Secured process for updating firmware and applications with integrity check and correct update server