Highly secure working from homeoffice BSI-approved for VS-NfD, EU/NATO RESTRICTED
The ECOS SecureBootStick® SX provides government agencies, institutions, companies of special public interest, and other organizations requiring highly secure access, with safe connections to terminal servers, virtual desktop infrastructures, and web applications – all from a fully encapsulated environment. A PC or Mac boots into the specially hardened ECOS Secure Linux operating system, ensuring maximum security from the very first moment.
How the Secure Boot Stick SX works
The internal hard drive remains switched off, preventing any malware on the host device from activating. All firmware and applications run directly on the SBS SX, enabling secure use of private or third-party devices with full BSI approval.
Highly secure home office work is thus guaranteed – implemented quickly, efficiently, and cost-effectively.
- RDP client, Citrix Workspace app (previously Citrix Receiver), VMware Horizon via RDP, PCoIP, BLAST, Firefox, Chromium, VPN client for IPsec
- Citrix HDX RealTime Media Engine to optimize audio and video transmission for Skype for Business and Microsoft Teams
- Microsoft RemoteFX for optimizing audio quality in conjunction with RDP
- Profiles for accessing various applications/servers at user, group or role level
- Use of local resources after approval (external USB storage devices, local printers)
- Authorization assignment for external devices linked to manufacturer ID or serial number of the device
- Remote update of all applications and firmware
- Integrated smart card reader for cards in ID-000 format
- Compatible with all common 64-bit PCs, largely with Intel-based Macs and tablets with x86 architecture
- UEFI Secure Boot support
- Keyboard drivers for more than 90 languages and countries
- Multi-monitor support
- Connection via LAN, WLAN, UMTS, LTE incl. browser for logging into the HotSpot
- Software in German and English (can be preset)
- Write-protected and signed partitions for boot loader and kernel
- Encryption via hardware of all security-relevant partitions
- Write-protected and signed partition for firmware and applications
- Writable partition for storing user parameters
- Hardened ECOS Secure Linux operating system
- Digitally signed boot loader, firmware and applications with validation in Chain-of-Trust
- Protection of all processes via smartcard, e.g. easy enrollment, logging on to the gateway, updating the stick
- Integrated firewall to protect against attacks in the same network and block ping requests
- Encryption of RAM contents down to the program code to be executed
- VM Start Detection prevents use in a virtual environment
- Fingerprinting of the guest computer including peripherals
- Instant logout when unplugging the SBS
- Secured process for updating firmware and applications with integrity check and correct update server