News Focus
News Focus
icon url

x-point

10/10/07 4:30 PM

#152924 RE: AppalachianArchitect #152918

AA:

The security features of VPro, virtualization and TXT,utilize the TPM. This, VPro, is a major technology that that Intel will be putting into all of their platforms eventually IMO. However when VPro was first released in 2006 the security features were missing. We had to wait a full year before they were released, and the only software that had been pre-announced to use the security technologies was an appliance that Symantec had prepared. It turned out that the Intel virtualization VMM, or hypervisor, only supported a VM appliance that ran on a Windows CE OS. It further turned out that Microsoft wouldn't give Symantec agreeable licensing terms to use said OS to run their appliance on. Now this may be because Microsoft has taken offense by some of Symantec's law suits, or perhaps it is because MS wanted to slow VPro's progress until their own hypervisor and approach to virtalization are ready. (Microsoft's approach will undoubtedly run their hypervisor on top of Windows while I expect Redhat's version to run on top of the hardware and under Windows.) In and event it appears that Intel took a hit because of this and so they hired Redhat to build an approach that can't be held hostage by MS. It can't be understated how important the hypervisor is going to be to the success of VPro. It, along with the TPM, are the heart and soul of VPro as a platform for Trusted Computing. I expect TPM activations will accelerate markedly after the Redhat release.

ALL JMO of course.

----------------------------------------------
[May 09, 2007]

Red Hat to Build Virtual Appliance OS for Managing Intel vPro-based Desktops

SAN DIEGO --(Business Wire)-- Red Hat (NYSE:RHT), the world's leading provider of open source solutions, today announced a joint program with Intel Corporation to deliver a Red Hat-branded software platform that supports desktop PCs with Intel vPro(TM) Processor technology. This exciting collaboration will bring the power of hardware-assisted virtualization to business desktop computing. For customers the compelling benefits include reduced management costs, improved operational efficiency and dramatically reduced exposure to security threats - regardless of the client operating system.


"The legacy desktop falls short in its ability to provide a secure, reliable and manageable environment," said Brian Stevens, CTO at Red Hat. "Intel vPro technology combined with a Red Hat Virtual Appliance OS will allow customers to create a rock-solid foundation that can then provision, manage and secure the PC. This technology will reduce operational costs and increase operational flexibility. We are delighted to partner with Intel on this project."

Using a PC with Intel vPro(TM) Processor technology, IT will be able to deploy appliances in a virtual machine that bring enterprise-class management and security to the PC. The Appliance OS from Red Hat will support pluggable Virtual Appliances, available through ISVs, to deliver end-to-end manageability. Virtual Appliances can be used to enable functions such as network security, provisioning, monitoring and asset management, regardless of the state of the desktop OS. In collaboration with Intel, Red Hat plans to develop, productize and support the necessary software components, including the hypervisor, the Service OS and Software Development Kit (SDK).


"Intel and Red Hat have a long history of technology collaboration, and this project will unlock the capabilities of the advanced business PC towards improved operational efficiencies," said Doug Fisher, Intel Vice President and General Manager System Software Division. "The virtual appliance capability built into the operating environment of business PCs coupled with technologies such as Intel(R) Virtualization Technology and Intel(R) Active Management Technology will enable a new level of solutions from the software ecosystem."

PCs with Intel vPro(TM) Processor technology and Red Hat's Virtual Appliance OS will host business applications in an isolated, secure and manageable manner. End users, IT departments, OEMs and ISVs will all benefit from the robust solutions that will be created based on these core technologies. Active development on the project is underway today, with Beta software expected later this year and general release planned for 2008.

http://www.tmcnet.com/usubmit/2007/05/09/2598442.htm

-----------------------------------------------------

Symantec delays virtual security appliance
Windows CE licensing and desire for more open source push back launch

Tom Sanders in California, vnunet.com 20 Aug 2007

ADVERTISEMENT
Symantec has delayed the launch of its Virtual Security Appliance for Intel's vPro enterprise desktop platform.

The security vendor was originally scheduled to release the appliance next month, but will now push back the release to mid-2008, Gary Sabala, senior product manager for virtual security solutions at Symantec, told vnunet.com.

Sabala attributed the decision to delay the software to feedback from beta customers and a desire for better support for open source technologies.

"One of our goals for the next version is to move to more open source components that we integrate into our solution," he said.

In a reference to Windows CE, which currently runs all vPro management appliances, Sabala added that the move will "ease our ability to work around some of the licensing issues for third-party components".

VPro is Intel's enterprise PC platform that uses virtualisation to allow for a single management appliance. The appliance runs independently from the system's main operating system and can apply software updates, for instance.

Symantec's appliance will run security software in an isolated virtual compartment, preventing malware and the user from tampering with the software.

As previously reported, Intel plans to launch the second version of vPro, codenamed Weybridge, on 27 August. Symantec originally aimed at launching its appliance, codenamed Project Hood, at the same time as the vPro upgrade.

Intel is also working with Red Hat on a future upgrade scheduled for release in 2008.
The virtualisation in Weybridge relies on proprietary technology that supports one virtual management appliance, such as Symantec's Virtual Security Appliance. The appliances are required to run Windows CE.

Intel and Red Hat aim to build a vPro version based on the open source Xen hypervisor that will allow for multiple management consoles and support Windows and Linux.

Sabala declined to elaborate on the discussions on Windows CE licensing, adding that vendors are still trying to come to grips with virtualisation.

"Virtualisation, especially at the desktop, is still very much at an evolutionary stage. We are still in discussions with Microsoft about how we want to support Symantec and its components in this new environment," he said.

The delay also offers Symantec some breathing space to further enhance its product. Feedback from beta customers pointed out that the appliance was lacking a robust management console, for instance.

This could undermine the value of Intel's vPro platform. Lenovo is currently the only software vendor shipping a vPro appliance.

An Intel spokesperson declined to comment on the effect that the Symantec delay will have on vPro, but said that the company will continue to work with software vendors to build out the platform's features.


http://www.vnunet.com/vnunet/news/2196991/symantec-delays-virtual

-------------------------------------

Licensing issues for Symantec dings Intel vPro
By Matthew Broersma, ZDNet (UK)
Published on ZDNet News: Aug 22, 2007 5:52:00 AM
TalkBack Share Digg Del.ico.us Print Email 0 0
Tags: Matthew Broersma, Processors & semiconductors

Symantec has delayed its virtualized security system for Intel's vPro platform because of licensing issues around Windows CE.
The delay is the latest setback for vPro, a bundle of Intel technologies aimed at business users. Among vPro's capabilities are virtualization--which is built into the Core chips used in vPro--and the ability for management tools to access features that are outside the control of the main operating system.

The vPro brand, along with the Viiv consumer platform, was part of Intel's attempt to recreate the success of the Centrino mobile wireless platform for laptops. In July, Intel said it will begin de-emphasizing vPro and Viiv from next year, in favor of the better-known Core brand.

Symantec's Virtual Security Solution (VSS) is designed to run on a virtual appliance outside the main OS, making it harder for users or attackers to get at.

The problem, Symantec said Tuesday, is not the software itself, but the tangled licensing issues surrounding virtualization.

"The first version of this product is actually ready to go. The code is written and we feel the product is in great shape," Gary Sabala, product manager for Virtual Security Solutions, told ZDNet UK. "However, while the product may be ready, we've discovered what other companies have also discovered when it comes to dealing with a virtual environment: that leveraging virtualization makes licensing a bit more challenging."

He said the VSS would be released "as soon as possible," suggesting it could be available in mid-2008.

The licensing issues involved specifically relate to the Windows CE software, which currently provides the platform for all vPro virtual appliances. Symantec is working to make the VSS run on open-source software as a way of getting around those licensing issues, Sabala said.

In May, Intel and Red Hat said they were developing a platform for vPro virtual appliances that is based on Linux and the Xen hypervisor, and would aim to have the technology ready by 2008. The move toward open source was the result of pressure by software vendors to move toward a "standards-based approach" for the vPro virtual appliances, Intel said at the time.

Besides Symantec, vendors such as PGP, StarCat, Altiris, Criston, LANDesk and Microsoft are working on management tools for vPro.

http://news.zdnet.com/2100-9584_22-6203833.html