The Pano Device

The Pano device is a zero client- no CPU, no memory, no operating system, no drivers, no software and no moving parts. Pano connects keyboard, mouse, display, audio and USB peripherals over an existing IP network to an instance of Windows XP or Vista running on a virtualized server. Pano is power friendly, consuming only 3% of the energy consumed by a traditional desktop computer.

The Pano is compact, power efficient, and works with all desktop peripherals.

The Pano can be viewed as using the IP network as an extension that connects all desktop peripherals to the virtual machine running on the server.

Getting started with a Pano

To deploy a Pano device, simply connect it to peripherals, network and power. There is no configuration to perform, no firmware to update, and no software to download.

As soon as a Pano is connected to a network, a logon screen appears. Users enter their Windows credentials and are automatically connected to their virtual machines. From there on, it's the same Windows experience.

Using peripherals with Pano

Pano can support a video display, keyboard, mouse, additional USB peripherals, plus external audio speakers or headphones.

Supported Peripherals	Connectors
Video display (resolutions up to 1600x1200)	One VGA
Ethernet (10/100 Mbps)	One RJ-45
USB peripherals	Three USB 2.0
Audio Out	Internal speaker
Audio Out	One mini-jack
Audio In	One mini-jack

 

Peripherals attached to the Pano device operate the same way they do when attached to a traditional PC. For instance, when users want to read data from CD, they simply attach an external CD reader via one of Pano's USB ports. If the user is authorized to use the peripheral, the CD drive will appear to Windows as if it was locally attached. The only drivers that are used are the peripheral's native drivers, and these drivers only need to be installed on the Windows virtual desktop, not on the Pano.

Security and the Pano

The Pano is secure because it does not run an operating system or any other software. Because there is nothing in a Pano that can be infected by a virus or have malicious code installed, it doesn't need to be scanned for vulnerabilities or exploits.

Even when a peripheral such as a USB thumb drive is connected, Pano remains secure. Peripherals work only when the user is authorized via policies enforced by the Pano Management Server. If the user isn't authorized, Windows doesn't even see the peripheral that is connected to the Pano. If a user is authorized, the peripheral is connected directly to Windows. Pano enforces fine-grained access policies based on user group membership, USB device class, and operation. As an example, a user may be authorized to read from a CD, but not write to it. This policy allows users to copy files or load software onto their virtual desktop, but prevents data from leaking out. Even when users are authorized, Pano can record USB operations so that the business can keep track of all its information assets.

Next: Pano Management Server

Pano Management Server Software

The Pano Management Server is the central component of the Pano architecture. The Management Server does the following:

• Discovers and controls Pano devices
• Controls the virtual infrastructure and makes sure virtual desktops are available
• Connects users to their assigned virtual desktops
• Monitors status of user sessions and takes corrective action when necessary

Central management for user desktops

The Pano Management Server is continually discovering and controlling Pano devices to ensure users can always access their virtual desktops. Once a Pano is discovered, the Pano Management Server instructs the Pano to display a login screen. Users enter their Windows credentials and are automatically connected to their virtual machines. From there on, it's the same Windows experience.

The Pano Management Server ensures a secure and reliable logon process by integrating tightly with directory services such as Microsoft Active Directory. Rather than maintain a separate database of users that might get out of sync, Pano queries Active Directory directly for each logon attempt. IT administrators only need to perform user account management in one place: Active Directory.

The Pano Management Server integrates with a virtualization manager such as VMware VirtualCenter in order to track the status of desktop virtual machines and control their availability. The Pano Management Server determines which virtual desktop is assigned to a user based on the user's group membership in Active Directory. If the user's virtual desktop happens to be powered off, the Pano Management Server can automatically start the virtual desktop machine and connect the user once the desktop is ready.

Web-based administration

The Pano Management Server includes a web-based Management Console that allows administrators to centrally administer their entire Pano system. The Pano Management Console provides views and management functions for Pano devices and virtual machines. It also delivers a centralized log facility and simple setup page.

Enabling users with self-service problem resolution

The Pano Management Server provides out of band management and support for each session. If a user experiences a problem with the desktop virtual machine, the user simply presses the single button on the Pano device and is presented with a choice of corrective actions. These corrective actions are offered by the Pano Management Server; since they are "out of band" of the operating system the corrective actions are always available, no matter what happens to the desktop virtual machine. This way a user who experiences a severe problem with the operating system (such as a complete freeze or halt) can use the Pano button to initiate a reboot or complete refresh of the virtual machine.

Flexible use models that match business needs

The Pano Management Server supports a variety of usage models, each of which is appropriate for different businesses. For example, a Call Center that comprises multiple agents performing the same tasks and running the same applications is best suited to the Pooled Collection model. In this model, the Pano Management Server maintains a common set of identical virtual machines. Any individual user is assigned an arbitrary virtual machine each time they log in and start a new session. The Pano Management Server keeps track of how many virtual machines are unused and will automatically provision additional virtual machines when the number is too low, allowing the system to accommodate surges in user demand.

Another model-the Cloned Collection model-is appropriate for Knowledge Workers who require a dedicated virtual machine, but can still benefit from simplified management from a common template. With this model each user is permanently assigned a specific virtual desktop; however, the virtual desktops all originate from the same template. In this usage model Pano can automatically provision a new virtual desktop and assign it to a new user, taking the manual steps out of the process completely.

Finally, the Custom Collection model is most appropriate for Power Users who require a dedicated virtual machine and the ability to completely customize their work environment. In this model Pano can support virtual machines that are built from scratch, built from a template or created by converting a physical machine to a virtual machine.

Next: Desktop Service

Pano Desktop Service

Pano Desktop Service is a lightweight Windows service residing within each desktop virtual machine that links peripherals attached to the Pano to the unmodified Windows drivers residing in the virtual machine.

Pano Desktop Service is also a key component in supporting USB peripherals. When a USB peripheral such as a USB thumb drive is inserted into a Pano device, Pano Desktop Service and the Pano Management Server work in conjunction to enforce the defined usage policies. Pano will allow the USB operation and plug into Windows only if the user is authorized for the particular device and operation.