Remote access with hardware encryption
The ECOS SecureBootStick HE
The ECOS SecureBootStick® HE takes the proven concept of the SBS CL to a new level of remote access security. Equipped with specially developed hardware encryption and multiple security features, it enables highly secure access to terminal servers, virtual desktop infrastructures, and web applications from a fully encapsulated environment.
With the ECOS SecureBootStick HE, any PC or Mac boots into the specially hardened ECOS Secure Linux operating system. The internal hard disk remains switched off, preventing any malware on the device from executing. This ensures complete separation between professional and private use of the computer.
The Secure Boot Stick HE provides a protected and fully encapsulated working environment and serves as a strong two-factor authentication device, using a cryptographic key anchored in the hardware.
- RDP client, Citrix Workspace app (previously Citrix Receiver), VMware Horizon via RDP, PCoIP, BLAST, Firefox, Chromium, VPN client for IPsec
- Citrix HDX RealTime Media Engine to optimize audio and video transmission for Skype for Business and Microsoft Teams
- Microsoft RemoteFX for optimizing audio quality in conjunction with RDP
- Profiles for accessing various applications/servers at user, group or role level
- Use of local resources after approval (external USB storage devices, local printers)
- Authorization assignment for external devices linked to manufacturer ID or serial number of the device
- Remote update of all applications and firmware
- Compatible with all common 64-bit PCs, largely with Intel-based Macs and tablets with x86 architecture
- UEFI Secure Boot support
- Keyboard drivers for more than 90 languages and countries
- Multi-monitor support
- Connection via LAN, WLAN, UMTS, LTE incl. browser for logging into the HotSpot
- Software in German and English (can be preset)
- Write-protected and signed partitions for boot loader and kernel
- Encryption via hardware of all security-relevant partitions
- Write-protected and signed partition for firmware and applications
- Writable partition for storing user parameters
- Hardened ECOS Secure Linux operating system
- Digitally signed boot loader, firmware and applications with validation in Chain-of-Trust
- Integrated firewall to protect against attacks in the same network and block ping requests
- Encryption of RAM contents down to the program code to be executed
- VM Start Detection prevents use in a virtual environment
- Fingerprinting of the guest computer including peripherals
- Instant logout when unplugging the SBS
- Secured process for updating firmware and applications with integrity check and correct update server