VMware ACE

Overview:

Deploy and manage secure, portable client PC environments across the enterprise and beyond. With VMware ACE, your organization can combine the power and versatility of virtual machines with the security and control of centrally managed PCs, making it easier to:

• Manage virtual desktops from a single point of control, even in remote and branch offices.
• Increase security and flexibility for secure mobile computing
• Safely extend corporate resources to 3rd party unmanaged desktops

Remote workers, business partners and third-party service providers all need access to corporate data and network resources, yet IT must also adhere to an ever-growing list of security and corporate governance regulations that are often at odds with user needs. As a result, many organizations are seeking ways to increase flexibility for their end-users without compromising security and control over endpoint PCs and other critical IT assets.

Harness the Power of Desktop Virtualization

VMware ACE is a comprehensive enterprise solution that organizations use to provision standardized client PC environments inside secure, centrally managed virtual machines called ACEs. Each ACE contains a complete client PC—including the operating system and all applications. Desktop administrators use the dynamic policy configuration capabilities in ACE to lock down endpoints with device and network access control, there by protecting confidential company data and ensuring compliance with IT polices.

Use VMware Workstation to create, package and deploy ACEs to local and remote endpoints such as laptop and desktop PCs, or even portable USB devices such as thumb drives and portable hard drives.

Once deployed, use the ACE Management Server to monitor ACEs and enforce corporate policies from a central location. The ACE Management Server enables administrators to deliver dynamic policy updates to local and remote ACE instances, as well as to control the activation and de-activation of each package for contractors, consultants and other temporary users.

Key Features:

• Full support for Windows 7 64-bit and 32-bit ACE Instances allow your users to run the newest Windows operating system.
• Integration with VMware Workstation 7: VMware ACE 2.6 offers seamless integration with VMware Workstation 7, giving customers access to both products through a single user interface. As a result, administrators can now use Workstation 7 to configure and deploy ACE packages across the extended enterprise.
• ACE 2 Management Server: Use the new ACE 2 Management Server to manage and control ACE clients from a central location. The ACE 2 Management Server has the ability to dynamically update control and security policies, including the ability to activate / deactivate ACE clients.
• Pocket ACE: Administrators can now bundle and deploy ACE packages directly on a portable USB media device such as a flash memory stick, portable hard drive or even an Apple iPod. End users can operate their ACE client machines directly from the USB device for unparalleled mobility and flexibility.
• Enhanced security capabilities: ACE 2.6 offers enhancements to policy and package settings that make it easier to secure and manage ACE clients. Flexible, granular controls for device and network access enable administrators to specify exactly which machines or subnets an ACE client may access. What’s more, ACE 2.6 uses a FIPS-validated 128-bit AES algorithm to prevent unauthorized access to data stored on ACE clients.

Centralized Control

Take command of client PCs across the extended enterprise from a single point of control.

• Centralized policy-based management. Virtual Rights Management (VRM) centralizes management of security policies and access rights applied to VMware ACE running on an end-user PC.
• Secured access. Secure the entire VMware ACE environment, including data and system configuration, with authentication and virtual disk encryption.
• Device control. Lock down PCs by granting or denying access to host PC devices such as printers, USB memory keys, or DVD/CD writers based on device type or ID.
• Expiration control. Configure VMware ACE to expire at a pre-determined time, or after a pre-set period.

Strong Security

Protect sensitive and proprietary information with robust security features such as full-volume encryption and granular access control over all network and peripheral ports.

• Rules-based network access. Enable endpoint compliance by identifying and quarantining expired, unauthorized or out-of-date VMware ACE environments by port or traffic type.
• Flexible endpoint lockdown. Tighten desktop security policies with granular device and network access control while providing end users the freedom to be productive.
• Secure access. Offer secure, managed access to your standard corporate desktop image from any PC, managed (company-owned PCs) or unmanaged (employee-owned PCs, 3rd party PCs including vendors and contractors).
• Virtual Machine Encryption. FIPS 140-2 compliant 128-bit AES Encryption of ACE virtual machines, including virtual disk and configuration files.
• Kiosk mode. With ACE 2.6, deliver virtual desktops that run in kiosk mode on shared physical PCs. ACE virtual machines in Kiosk mode deliver rich applications on shared public PCs, while protecting the host operating system from misuse and malicious attacks.
• Smart card readers can be connected directly to an ACE Instance or shared with the host machine. The smart card reader can be used to authenticate users or to provide credentials for securely sending email or electronically signing documents within the virtual machine.

Flexible Deployment

Deploy ACE instances on portable media devices so that end users to take their computing environments with them wherever they go.

• Provision desktops on portable media. Quickly and securely provide corporate standard desktop access to 3rd parties such as customers, contractors and vendors without the need for expensive additional systems.
• Free the desktop from hardware dependencies. Give mobile employees the freedom to work from wherever they need to.
• Recover with ease. ACE client packages are easy to back up and easy to restore, enabling your organization to include client PCs in your disaster recovery and business continuity solution.

Streamlined Management

Create and deploy virtual machines for simpler managed desktop environment.

• Design once, deploy anywhere. Create standardized hardware-independent PC environments with virtual machines and deploy them to any PC or portable flash media device for an easy to manage, yet complete desktop experience.
• Leverage a single virtual client platform. Support for a single VMware platform empowers VMware Workstation 7 users to create and securely package VMware ACE virtual machines for deployment to end users.
• Simplify creating Windows and Linux virtual machines with Easy Install. VMware Workstation 7, included with VMware ACE 2.6, helps IT administrators save time and simplify Windows and Linux guest operating system installation. Just answer a few simple questions and the Easy Install feature will perform an unattended installation of the guest operating system and VMware Tools.

Rapid Reconfiguration

Take snapshots of stable system states so that you can move between known desktop image states on endpoint PCs.

• Snapshots. Eliminate the time required to reconfigure systems by leveraging pre-captured snapshots of “known good” desktop states. Rapidly configure demo and training environments with custom snapshots in seconds.
• Quick recovery. Save help desk and support costs by helping users recover quickly on their own. With a snapshot that is taken after the VMware ACE virtual machine is installed on the client, end users can revert to a previous state within seconds.

Rich PC Experience

• Support for DirectX 3D graphics. VMware was the first virtualization product to support 3D graphics. With VMware ACE 2.6, users can now run Windows Aero, Open GL, and DirectX 3D applications that support DirectX 9.0c with Shader Model 3 3D graphics.
• Integrated desktop experience with “Unity” mode. Users can access applications within ACE virtual machines as if they were applications inside their normal operating system desktop. The desktop of the rest of the ACE virtual machine disappears and the application looks just like a normal window in the rest of their environment.
• Support for multiple monitors enables users to take full advantage of their available screen real estate when using an ACE instance.
• If enabled, users can drag and drop email attachments, Rich Text and graphics between the ACE instance and the host machine. If this feature is disabled, the contents of the virtual machine will remain secure.

How to Buy:

	ACE 2 Starter Kit	ACE 2 Standard Kit	ACE 2 Enterprise Kit
Workstation 7	1	1	2
ACE Client Licenses	10	50	200
Volume Licensing Key (single key to centralize deployment process)
ACE Management Server

 

Purchase Scenarios

There are three packages to choose from, with additional a la carte options also available. The three kits include:

• ACE 2 Enterprise Kit: The VMware ACE 2 Enterprise Kit gives you all the features and functionality you need to manage a large base of laptop and desktop users, including the VMware ACE Management Server and a volume licensing key that eliminates the need to install individual license keys on each ACE client.
• ACE 2 Standard Kit: The Standard VMware ACE kit also includes the VMware ACE Management Server and a volume licensing key, but is designed for smaller deployments. Additive licenses in any quantity can be purchased to upgrade an existing Volume Licensing Key.
• ACE 2 Starter Kit: For individuals and organizations that want to run small deployments for individual groups, VMware ACE Starter kit provides key functionality for deployments that do not require enterprise management capabilities. Customers who purchase the Starter kit can add capacity to their VMware ACE deployment by purchasing up to 50 individual licenses for ACE clients.

Support Options

VMware offers pay-per-request support for VMware ACE Starter Kit in one, three and five per incident support packs. You can also take advantage of our free online knowledge base, documentation and discussion forums for up-to-date information on all of VMware’s products.

VMware will be offering support for ACE 2 Standard and Enterprise Kits as well as the ACE 2 Management Server through our Platinum and Gold support and software subscription programs. These programs are offered on an annual or multi-year basis. VMware Platinum Support is designed with mission-critical applications and production environments in mind. VMware Gold Support is designed for business-critical applications and platforms that require support during normal business hours. These services include free updates and upgrades throughout the life of the contact. Support is delivered through VMware’s global support centers staffed 24x7 to provide access to our industry-leading expertise in virtualization.