Specifications

ManualsBrandsVMware ManualsComputer equipmentACE

Technical Note

Pocket ACE Guide

VMware ACE 2

ThistechnicalnotedescribestheVMwareACE2PocketACEfeatureandcontainsthefollowingsections:

 “A b o u t ThisGuide”onpage 1

 “OverviewofACE2EnterpriseEdition”onpage 1

 “IntroductiontoPocketACE”onpage 2

 “ChoosingaPortableMediaDevice”onpage 4

 “CreatingthePocketACEMaster”onpage 5

 “CreatingthePocketACEDeploymentPackage”onpage 9

 “DeployingthePocketACEpackage”onpage 10

 “Conclusion”onpage 11

 “References”onpage 11

 “Glossary”onpage 11

About This Guide

Thepurposeofthistechnicalnoteistoprovideanin‐depthviewofPocketACE,afeatureofVMwareACE 2

EnterpriseEdition.Thisguideisintendedforarchitectsoradministratorslookingformoreinformationabout

PocketACEandhowitmightbeusedintheirenvironments.Thisguidecoversthe

stepsrequiredtocreatean

ACEmaster,policy,andpackagefordeployingPocketACEinstances.

Overview of ACE 2 Enterprise Edition

VMwareACE2EnterpriseEditionisasoftwaresolutionthatdeliversenhancedmanagement,security,and

usabilitytostandarddesktopvirtualizationproducts.UsingACE 2,anorganizationcanrapidlyprovisiona

standardized,securePCenvironment—anACEvirtualmachine—toanydeviceendpointintheenterprise,

whetherornotitismanagedbythe

ACEadministrator.AnACEisapolicy‐protectedvirtualmachine

containinganoperatingsystem,applications,anddata.Usingvirtualrightsmanagementtechnology,ACE 2

enablesdesktopadministratorstocontrolACElifecycles,protectdata,andensurecompliancewithIT

policies,includingsoftwarelifecyclemanagementandaccesstodataandapplications.

ThecreationtoolforanACEinstanceisVMwareWorkstation6withtheACEOptionPack.Usingthistool,

systemadministratorscaneasilycreate,package,deploy,andmanagevirtualdesktopinstancesforawide

arrayofusecasesacrosstheenterprise.SystemadministratorscreateanACEMasterfordistributiontousers



thatincludes:

 Avirtualmachinewithanoperatingsystem,applications,anddata.

 Anapplicationtorunthevirtualmachines.

 Asetofpoliciestocontrolthelifecycleandcapabilitiesofthevirtualmachine.

Summary of content (14 pages)

PAGE 1
Technical Note Pocket ACE Guide VMware ACE 2 This technical note describes the VMware ACE 2 Pocket ACE feature and contains the following sections: “About This Guide” on page 1 “Overview of ACE 2 Enterprise Edition” on page 1 “Introduction to Pocket ACE” on page 2 “Choosing a Portable Media Device” on page 4 “Creating the Pocket ACE Master” on page 5 “Creating the Pocket ACE Deployment Package” on page 9 “Deploying the Pocket ACE package” on page 10 “Conclusion” on page 11
PAGE 2
Pocket ACE Guide From the ACE Master, administrators create an ACE package that is distributed to end users using download, DVD, CD, USB Flash drive, or other media. See Figure 1 for a diagram of ACE package distribution. Figure 1. ACE Package Distribution ACE 2 Enterprise Edition is used across the enterprise to: Ensure secure controlled access to enterprise resources from a standardized PC environment running an ACE virtual desktop.
PAGE 3
Pocket ACE Guide Hardware independence. Native application compatibility. Applications install just as they do on a PC. FIPS 1402‐compliant data and configuration encryption. Data is fully encrypted at all times. The ability to suspend, resume, and snapshot. Robust policy management including access, network, and device rights. Ability to deploy instances to PCs and laptops, not just portable media drives.
PAGE 4
Pocket ACE Guide With Pocket ACE, IT administrators can easily deploy a trusted, managed, and more secure virtual desktop instance to offshore partners. The virtual desktop instances can be distributed using portable media or download. The virtual disk of the Pocket ACE can be encrypted to reduce the risk of lost data. By setting specific network quarantine policies, traffic between offshore partners can be limited, allowing only communication between the Pocket ACE instance and the enterprise network.
PAGE 5
Pocket ACE Guide by end users than portable hard drives, which offer greater capacity. Typically, these media types are not built to withstand a high degree of shock from being dropped or tossed around, although some protection is offered. Currently, USB flash drives are very common in 4GB and 6GB capacities at increasingly higher read/write speeds. In addition, they are much more resistant to being dropped and tossed around. Some manufacturers also offer features such as rugged designs and waterproofing.
PAGE 6
Pocket ACE Guide Creating the ACE Master Policy Before you begin defining the policy for your ACE Master, consider the target users who will use the Pocket ACE instances. Some factors include how secure or restrictive the environment should be, how remote users will get assistance if there is an issue, and whether any restrictions should be placed on accessing peripherals.
PAGE 7
Pocket ACE Guide Removable Devices To configure removable devices 1 Under Removable Devices, ensure that the boxes for CD‐ROM and Serial are selected. 2 Under Removable Devices, USB Devices, accept the default setting, Allow. The removable device policy enables you to configure user access for the devices that are connected to the host system. Each use case and organization policies will vary. For a more secure Pocket ACE instance, disable all access to all devices.
PAGE 8
Pocket ACE Guide Administrative Mode Under Administrative Mode select Enable administrative mode. Enter a password that can be given to end users. This password enables users to access administrator functions for resolving problems. Enabling Administrator Mode allows an ACE administrator to remotely help a user who has limited or no connectivity to solve common problems such as password resets and expired ACE instances.
PAGE 9
Pocket ACE Guide Creating the Pocket ACE Deployment Package After the ACE master for a Pocket ACE instance has been created and the policies configured, a package for deploying Pocket ACE instances must be created. In addition to full deployment packages, policy update packages and server update packages can be created. Update packages can be created for updating existing Pocket ACE instances after they have been deployed.
PAGE 10
Pocket ACE Guide Creating the Pocket ACE Deployment Package The actual creation of the package for deploying your Pocket ACE instances is done using the Pocket ACE Package Wizard. You can start the Pocket ACE Package Wizard from the workspace tab of the ACE master you created for your Pocket ACE instances by selecting Create Pocket ACE Package. You must provide a name for the Pocket ACE package and a location for storing the package and its accompanying configuration files.
PAGE 11
Pocket ACE Guide To deploy a Pocket ACE 1 Select the portable media device listed and click Deploy. 2 When the password dialog box appears, enter the password for deploying the Pocket ACE package. As the Pocket ACE is deployed, a progress dialog box appears. When completed, a success dialog box appears. After the Pocket ACE instance is deployed to the portable media, it can be distributed to the end user. For Pocket ACE instances that have an initialization password set, the end user needs the password.
PAGE 12
Pocket ACE Guide host‐only networking A type of network connection between an ACE instance and the host. Under host‐only networking, an ACE instance is connected to the host on a private network, which normally is not visible outside the host. Multiple virtual machines configured with host‐only networking on the same host are on the same network. See also bridged networking and network address translation. host operating system An operating system that runs on the host machine.
PAGE 13
Pocket ACE Guide policy A policy controls the capabilities of an ACE instance. Policies are set in the policy editor. See also live copy of policies, working copy of policies, and publish. preview An operating and viewing mode that an administrator can use to preview the ACE instance as it will run on the end user’s machine. The administrator can use this feature to see the effects of policy and configuration settings without having to go through the packaging and deployment steps.
PAGE 14
Pocket ACE Guide Workstation ACE Edition The program used by the administrator to create and deploy ACE packages and manage ACE instances. Formerly named “VMware ACE Manager.” VMware Tools A suite of utilities and drivers that enhance the performance and functionality of your guest operating system.