IBM Virtual Desktop Strategy
© 2011 IBM Corporation
Gen 2 VDI can address your challenges
optimize cost, efficiency, agility, resiliency, and security
2
User demands
A wide range of devices
Mobility, Tele commute
“windows” end user
experience
CEO/CFO priorities
Reduce cost
Lower business and IT risks
Increase productivity
IT challenges
Protect data
Recover from
disasters, downtime
Minimize security
and compliance
risks
Control spiraling
desktop
management costs
Manage Windows 7
and application
upgrades
Resiliency
Security
Efficiency
Cost
10. Server Headaches: 7-9 users/CPU Core, 1-2 GB RAM 9. Storage Headaches: IOPS, cost of storage
8. Network headaches: need upgrades, Latency 7. Application performance: Multi media experience 6. Licensing headaches – Microsoft VDA/SA
5. Offline use: 40% of users buying a PC notebook 4. Internal Politics: from desktop team to datacenter 3. Not necessarily easy to manage: stateful virtual desktops
2. Benefits are hard to quantify. Cost savings occur in hidden and indirect ways
1. The economics don't stack up
Gartner Top 10 VDI problems
Information Week CIO survey
Industry concerns on Gen 1 VDI are addressed by Gen 2 VDI
© 2011 IBM Corporation 4
RO
I P
ro
m
is
e
Gen1
Hype
Disillusionment
Trough
2006-07
2008-10
2011-Beyond
• No Savings • Complex, closed • Incomplete use cases • Isolated Management • Add-ons
• Low TCO • Simple, open • Complete • End-end DMI • Packaged
Gen 1 vs Gen 2 VDI
•
Private Company, founded 2006; ~50 people;
•
Headquartered in Austin, TX
•
Venture backed
•
World-Wide Coverage
•
Broad Industry and Analyst Recognition
•
Strategic Customers, and Business Partners
Virtual Bridges – VDI pioneers
Brian Madden speaks….If you were to ask me if there are any companies with desktop virtualization products that you should look at, I'd throw out two suggestions right off the bat: Virtual Bridges’ VERDE and Quest
Software’s vWorkspace. Both are quality desktop virtualization products with several features that the big two don't have, and both products cost much less than those from the big two.”
© 2011 IBM Corporation
What is Virtual Desktop for Smart Business with VERDE?
6
TEM: Tivoli Endpoint Manager; TAM E-SSO: Tivoli Access Manager Enterprise Single Sign On
HA: High Availability; CAC: Common Access Card; DAS: Direct Attached Storage; PCLM: PC Lifecycle Management; LEAF: Live Environment Access Format; VERDE: Virtual Enterprise Remote Desktop Environment
SCCM: Microsoft Systems Center Configuration Manager; KVM: Kernel-based Virtual Machine
Integrated
Optimized
Open
Simple
Low TCO
Casual Power user Office
Server: x3650 M3, x3850 X5, HS21, HS22, etc.
Storage: NS3400, N6240, DS3500, SONAS, etc.
Network Switches: G8052, G8124E, G8264, etc.
Distributed Connection Broker, HA, Cluster scale out
Windows and/or Linux virtual desktops
Integrated Offline/Online/Remote Branch VDI
LEAF Managed/Legacy/Zero End point; FDDC stds
Active Directory, LDAP Integration
Application virtualization integration
PCLM integration – TEM, SCCM, ZENWorks
TAM E-SSO integration; CAC: Common Access Card
Appliance. SELinux, Svirt, MAC isolation, EAL4+
Cache I/O on DAS: Copy on Read, Write
Server Operating System KVM Hypervisor, Storage Optimizer
Desktop Management and Security
Directory Application
Gold master images
Dynamic/Static/Kiosk/Long-life dynamic virtual desktops
Differentiated Generation 2 VDI Architecture
Home
Branch Office
SmartSync™
Storage Optimizer
Shared Datastore (NAS/SAN)
Directory / Authentication Service
LAN
Contractor Employee
Persistent User Data
Application Management Gold Master Technology
WAN/INTERNET CLOUD
DATA CENTER
Hypervisor + Distributed Connection Broker + Direct Attached Storage
(One or More Servers)
SmartSync™
Managed Endpoint
True Offline VDI
Legacy Endpoint
Repurpose Older PCs
Zero Endpoint
No Install, Boot to VDI
LAN / WAN
© 2011 IBM Corporation
Key Architectural Decisions
10) Backup and Recovery 11) Scale up/out
12) Server configuration, Memory Optimizer, VM Density
13) Storage: Attached, NAS, SAN; Accelerator 14) Performance
Deployment model, Legacy Application colocation, Protocol, Storage, Server, Network
15) Remote Management
16) Integration: PC Configuration/Life Cycle Management
17) On-premises, Private Cloud, Managed Private Cloud – hosted dedicated
End point Device Network Mode: -Online - Offline - Branch Virtual Desktop - OS - Application - Security Server - Scale
- HA Storage
Directory
Protocol
Peripheral
1) User segmentation
2) Access devices: mobile, thin client, refurbished desktop/laptop; OS: Mac/Linux/Windows
3) Access client alternatives: Web browser, Rich client
4) Desktop Gold Master Images (be mindful of dependencies; Licenses owned by Customer) 5) Remote Access Protocol: RDP, NX, SPICE,
etc.
6) Directory services (Active Directory, LDAP), SSO
7) Security: network, VPN, AV, Firewall
8) Deployment alternatives: online, offline, remote branch office
9) High Availability and Disaster Recovery
Two Integration Points:
§
Guest environment enhancements to
allow the TEM agent to load without
registering a new desktop in the BF
console each time a dynamic instance
boots
§
Write values into the system registry that
fixlets can query in their "relevance" stage
to determine if the guest is dynamic,
static, gold, running on LEAF, etc.
TEM has built functionality in their
console to be able to analyze and report
this basic information on all VDSB VM's,
so everything can be manage (physical,
virtual, dynamic/virtual) from one
console
© 2011 IBM Corporation
TAM E-SSO provides:
SSO inside the virtual desktop
Two-Factor Authentication
Access and Security Workflow
Automation
Fast user switching
User Access Tracking & Audit
Centralized Identity & Policy
Management
With no change to the
infrastructure
With Tivoli Access Manager for Enterprise Single Sign-On
TAM E-SSO enables
visibility
into user activity,
control
over
access to business assets, and
automation
of the sign-on
process in order to drive value for our clients.
Why IBM Virtual Desktop for Smart Business with VERDE?
Traditional VDI (Gen 1)
Easier
More
productive
More
affordable
IBM Virtual Desktop for Smart Business with VERDE
Comprehensive functionality,
easier to manage and use
Install in 3 hours vs 7 days
Simple and Open Architecture
Work anytime, anywhere,
online/offline/branch, on secure
Windows/Linux virtual desktops
Lower TCO
IGF Lease option
Manual installation, integration, customization
Complex and closed architecture Require high level of expertise Users confined to online VDI Dependent on Microsoft
High CAPEX (Server, Storage), OPEX
© 2011 IBM Corporation
Dramatically lower TCO: desktop management, hardware,
software
Low complexity: integrated console; fewer number of
servers; open architecture, stateless dynamic sessions,
easier and faster install, easier management
Better coverage: integrated offline and remote branch VDI;
Windows and Linux virtual desktops
Summary and Next Steps
12
Next Steps
Architectural Decisions
Proof of Concept / Pilot
Trademarks and notes
IBM Corporation 2011
IBM, the IBM logo, and ibm.com are registered trademarks, and other company, product, or service
names may be trademarks or service marks of International Business Machines Corporation in the United States, other countries, or both. A current list of IBM trademarks is available on the Web at “Copyright
and trademark information” at www.ibm.com/legal/copytrade.shtml
Adobe, the Adobe logo, PostScript, the PostScript logo, Cell Broadband Engine, Intel, the Intel logo, Intel Inside, the Intel Inside logo, Intel Centrino, the Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, Pentium, IT Infrastructure Library, ITIL, Java and all Java-based trademarks, Linux, Microsoft, Windows, Windows NT, the Windows logo, and UNIX are trademarks or service marks of others as described under “Special attributions” at: http://www.ibm.com/legal/copytrade.shtml#section-special
Other company, product, and service names may be trademarks or service marks of others.
References in this publication to IBM products or services do not imply that IBM intends to make them available in all countries in which IBM operates.