BSI-approved access for VS-NfD, EU and NATO RESTRICTED environments
ECOS SecureBootStick ZX
With the BSI-approved ECOS SecureBootStick® ZX, organizations can, for the first time, access data and applications classified as VS-NfD, EU RESTRICTED or NATO RESTRICTED from virtually any, even private, PC or Mac.
The Secure Boot Stick ZX combines multiple, cascading security layers to deliver an exceptionally high level of protection. Featuring a slot for ID-1 format cards, it supports ID cards, PKI cards and service cards, including the Bundeswehr military ID card, for strong user authentication.
Technically and in terms of design, the ZX corresponds to the SBS SX model – and, like it, is officially approved by the BSI for VS-NfD, EU and NATO RESTRICTED operation.
- RDP client, Citrix Workspace app (previously Citrix Receiver), VMware Horizon via RDP, PCoIP, BLAST, Firefox, Chromium, VPN client for IPsec
- Citrix HDX RealTime Media Engine to optimize audio and video transmission for Skype for Business and Microsoft Teams
- Microsoft RemoteFX for optimizing audio quality in conjunction with RDP
- Profiles for accessing various applications/servers at user, group or role level
- Use of local resources after approval (external USB storage devices, local printers)
- Authorization assignment for external devices linked to manufacturer ID or serial number of the device
- Remote update of all applications and firmware
- Integrated smartcard reader for PKI cards with CardOS 5.X in ID-1 format (service ID card, BW troop ID card...)
- Compatible with all common 64-bit PCs, largely with Intel-based Macs and tablets with x86 architecture
- UEFI Secure Boot support
- Keyboard drivers for over 90 languages and countries
- Multi-monitor support
- Connection via LAN, WLAN, UMTS, LTE incl. browser for logging into the HotSpot
- Software in German and English (can be preset)
- Write-protected and signed partitions for boot loader and kernel
- Encryption via hardware of all security-relevant partitions
- Write-protected and signed partition for firmware and applications
- Writable partition for storing user parameters
- Hardened ECOS Secure Linux operating system
- Digitally signed boot loader, firmware and applications with validation in Chain-of-Trust
- Protection of all processes via smartcard, e.g. Easy Enrollment, logging on to the gateway, updating the SBS
- Integrated firewall to protect against attacks in the same network and block ping requests
- Encryption of RAM contents down to the program code to be executed
- VM Start Detection prevents use in a virtual environment
- Fingerprinting of the guest computer including peripherals
- Instant logout when unplugging the SBS
- Secured update process for firmware and applications with integrity check and correct update server