Basis.WorkPlace

The main articles are:

• Virtualization. Classification and applications
• Virtual Desktop Infrastructure (VDI)

Bas.WorkPlace - software for creating infrastructural desktops with the ability to choose a use case: VDI, connection to a terminal server, to individual terminal applications, to physical PCs.

2024: Compatible with Astra Linux 1.7

"Basis" and "Astra Group" confirmed the compatibility of their flagship solutions.

Based on the results of comprehensive testing, experts confirmed the effectiveness and uninterrupted operation of the Basis Workplace VDI solution in conjunction with Astra Linux 1.7. Solution compatibility provides customers with the ability to use a completely import-independent software stack while maintaining the usual functionality and without stopping business processes. Basis announced this on April 8, 2024.

Having verified the operability and reliability of the technological stack, Astra Group experts certified it as part of the Ready for Astra IT manufacturers' cooperation program.

Basis Workplace certification has become significant and positive news for the market. We officially guarantee that our customers can freely use Astra Linux as a guest operating system to work with virtual desktops created using Basis Workplace, "said Kirill Sinkov, Director of Technology Partners at Astra Group.

The compatibility of Basis Workplace and other ecosystem products with partner solutions demonstrates to the customer that their use - independently or as part of a software and hardware complex - guarantees the quality and reliability of the infrastructure, - said Dmitry Dvortsov, Director of Partner Relations at Basis.

2023

BasicWorkplace 2.0 with end-to-end authorization for a Linux-Linux script using Kerberos technology

BasisWorkplace from the Basis developer has been updated to version 2.0. A number of special functions have appeared in this version of the platform. Particular emphasis is placed on the possibilities of user interaction with the virtual workplace through new channels and devices. The developer announced this on December 4, 2023.

This version of their platform is an important step in building a real VDI as a service in Russia. Version 2.0 provides end-to-end authorization for a Linux-Linux script using Kerberos technology. The RX connection to the Linux virtual desktop is now done using end-to-end authentication. Thus, after successful authentication on the Linux operating system of the access device, end-to-end authentication is performed at all stages of the user's connection to the virtual desktop.

It is possible to configure the system for working with PostgreSQL DBMS on two IP addresses with automatic switching to a backup address. Which expands the ability to provide a fault-tolerant DBMS service for the operation of the BasicWorkPlace management components. When specifying multiple IP addresses, the replica server must become the Master (master server) using third-party means, i.e. the replica must become writable if the database is not available at the primary address.

Access devices can now translate connected USB devices to a virtual desktop. A mechanism for translating USB devices "as raw" for the entire list of supported operating systems has been implemented. Broadcast devices can be subject to additional control and filtering using superimposed information security tools.

For the convenience of users, the display of the state of components in the web interface has been expanded: the list item for which a violation of functionality is detected will be highlighted in red and opposite it the icon corresponding to the state ("Failure" state). This approach with IP address output will reduce the time it takes to detect and correct a failure.

It became possible to use an additional channel between the user's device and the virtual desktop from third-party software. The functionality is available only for use in Desktop Pools and only one additional channel can be used at a time. In order to smoothly introduce users to the new mechanism, the developers have posted a distribution of an example software that uses an additional channel.

We are constantly developing our products, making our systems even more convenient, safe, efficient. As of December 2023, there are a large number of platforms supporting various types of virtualization and aimed at solving various problems, while we take an integrated approach and strive to close all possible customer needs within one platform. The last update of the Basic Workplace with the addition of functions is the next step in this direction. Their integration allows our clients to achieve not only cost savings and maximize the benefits of existing resources, but also increases the level of process automation, as well as the adaptability and scalability of the business, "explained Yakov Ravshanov, director of client solutions at Basis.

As part of the "Stationary PAC" of domestic developers

The companies Basis Fplus",,,,", " MyOfficeKaspersky Lab and DION Getmobit BASEALT September 21, 2023 presented software and hardware complexes for a stationary workplace and ensuring the operation of the server center.

Two types of PAC were introduced. Stationary PAC consists of, OS Alt Linux mail client, Mailion document editors from, MyOffice funds. corporate communications from DION data security The solution for protecting end devices is also responsible for the stationary complex itself. PAC Kaspersky Endpoint Security can be built on the basis GM-Box от Getmobit of the original hybrid docking stations in single-loop and double-loop versions, or laptop the Fplus monoblock, which provide a connection virtualized to the infrastructure created in Basiz.Workplace. Workplaces are centrally and remotely managed using a platform GM Smart System that allows you to organize and administer multifunctional workspaces both at sites and in critical infrastructure of state authorities the corporate business.

The server PAC consists of Fplus hardware - server and DSS, as well as virtualization, which is provided by the Basic Dynamix solution, Basic Virtual Security virtualization protection, Malion mail system and Private Cloud from MyOffice, Alt server and Alt domain. Protects the infrastructure of this PAC SIEM system Kaspersky Unified Monitoring and Analysis Platform - a single platform for monitoring, analyzing and responding to cyber threats.

Both PAC will help domestic companies and organizations to switch from foreign digital infrastructure to domestic infrastructure faster and with lower costs: solutions have been developed in Russia, are completely import-independent and meet all security standards, and most importantly, they allow this transition to be made seamlessly.

As the practice of dozens of enterprises shows, when installing PAC, the entire process of migration of companies to import-replaced jobs is significantly simplified. Using the Basis virtualization tools in the server PAC, you can migrate the entire virtual infrastructure to the domestic infrastructure from various foreign solutions, for example, VMware or Hyper-V, with almost no downtime. Simple infrastructure for migration can be up to 10 minutes. What is important, migration takes place without data loss, - said David Martirosov, CEO of Basis.

Russian manufacturers and developers have managed to create ready-made high-quality alternatives to foreign products. These are real solutions that allow them to carry out a painless and quick transfer of the IT infrastructure to domestic "rails." Combining the efforts of Russian companies and the creation of intervendor products allows us to accelerate the process of becoming Russia as a sovereign state in the field of information technology, "said Alexey Melnikov, Managing Partner of Fplus IT Holding.

The issue of migration from foreign IT products to domestic systems is extremely acute for customers of almost any industry. This applies to both software and infrastructure solutions. The shift should take place quickly, efficiently, without prejudice to business processes. At the same time, we must not forget that migration can lead to the loss or compromise of critical data. Kaspersky Lab solutions are designed to help implement this difficult transition for companies and ensure the security of both end users and IT infrastructures, "said Anna Kulashova, Managing Director of Kaspersky Lab in Russia and the CIS countries.

Within the framework of PAC, companies have the opportunity to use two at once: operating systems one of them, as a rule, Windows the second is based on (Linux Alt Linux) integrated with the Basic.Workplace solution virtualizations with desktop technologies () VDI and application delivery to any of the existing operating systems. Thanks to the technology, the user can simply click on a shortcut located on the desktop in the created import-substituted environment, use simultaneously applications that have not yet been imported, available on Windows. This allows you to migrate to domestic solutions seamlessly, gradually and habitually for the user. It also solves the issue of additional costs, when part of the information or processes implemented with the help of foreign, does not need ON to be transferred to domestic at a time.

As part of the domestic PAC for work in the office

Domestic developers, companies, Fplus, MyOffice"," Basis"," and Kaspersky Lab NPPCT Getmobit presented a joint comprehensive solution for equipping a stationary workplace -. PAC software and hardware complex (PAC) will help Russian companies and organizations switch from foreign digital infrastructure to domestic infrastructure faster and at lower costs. All components are designed in full, Russia are import-independent meet all safety standards and tested for interoperability. This was announced on September 11, 2023 by representatives of the Basis company.

As reported, the PAC is based on centrally managed workstations based on user devices - universal GM-Box docking stations in single-loop and dual-loop versions, providing connectivity to the virtualized infrastructure created in Basic. Workplace. Read more here.

Version 1.98

On August 15, 2023, Basis announced that it had updated its VDI platform Basiz.Workplace to version 1.98. In the updated version, the company's solution for creating a virtual desktop infrastructure with the ability to choose a use case has received more than a dozen comprehensive updates. The study of critical components made it possible to optimize the level of reliability of all systems. The developers paid special attention to the functionality and interface of the product, making it intuitive and user-friendly.

Version 1.98

According to the company, in version 1.98, the VRM administrator has a tool for grouping terminal applications by selected categories, with which they optimized navigation in the window for selecting client applications Basid.Workplace for end users. Also, for the Basic Workplace 1.98 client version, an MSI-format installer has been developed that allows automated distribution of the BPM client to access devices through Active Directory group policies.

In the virtual environment settings, when configuring the network adapter, the capabilities of filtering network traffic are expanded: filters by MAC address and by recipient (promiscuousmode) have been added. An option has been added for external resources based on OpenStack to enable SSL certificate verification. Added incremental backup capability - Backups created for block DSS can now be used to restore data to external file-type DSS (NFS) and vice versa.

The developers have optimized the DSS tools. The cluster editing interface is optimized. The options are divided into two tabs, Settings and DSS. For clusters based on external file type DSS (NFS), the ability to enable and disable the use of template and image cache from each DSS added. When you remove DSS from the cluster, you added a wizard that allows you to delete or migrate VMs to other DSS.

The functionality of interaction with several LDAP directories has been improved - it became possible to add several unrelated domains to the system and assign users and groups of them to Basic objects. WorkPlace.

System administrators have the ability to assign a fixed IP address to individual users of a session desktop pool. This preserves all the capabilities to automate the life cycle of virtual desktops. The function will allow you to make additional settings for individual users in other infrastructure systems and services that can operate exclusively with IP addresses.

An API call has been implemented to register an existing virtual machine as a personalized desktop. At the same time, all supported virtualization platforms can be used to register VMs.

The solution received a number of visual changes: the logo and color palette of the interface were changed, and the VDI infrastructure management section in the administrator web interface was renamed to Bas.WorkPlace. The system received multiple changes in the graphical explanatory materials of the administrator's manual related to the rebranding of the software product.

The updated version expanded support for current versions of Russian OS from the register of Russian software: support for Alt 10, Astra 1.7 systems was added, and support for Alt 7 SPT, Astra SE 1.6, Astra CE 2.12 systems was discontinued.

We have carried out comprehensive work to optimize the platform. Optimized speed and ease of navigation in the client of provided terminal applications. The BPM administrator now has the ability to centrally install through Active Directory group policies using the msi installer of the BasicWorkPlace Client. When the password expires, the user can change it using the BasicWorkPlace client. The password change screen is implemented in a generally accepted form, which optimizes convenience, security and reduces the number of errors. explained by Yakov Ravshanov, Director of Client Solutions at Basis

As a component of PAC "MyOffice" and "Rostelecom"

MyOffice and PJSC Rostelecom agreed to create software and hardware systems (PAC) for joint work with documents and communications within the framework of mobile and stationary workspaces and server solutions based on the trusted Aurora OS, their mutual promotion and support. MyOffice announced this on June 15, 2023. The main component of PAC will also be "Basid.WorkPlace." Read more here.

2022: JaCarta Token and Smart Card Compatibility

The company Aladdin R.D.."," Russian a developer and supplier of tools, authentications products and solutions for providing and, information security and protect sensitive data domestic a developer integrator cloudy and solutions "" Basis confirmed the compatibility of the products of the line JaCarta software and Bas.WorkPlace. This was announced by the company "Basis" on December 6, 2022. The audit established the operability and correctness of the joint functioning of solutions. Tokens from smart cards the company "Aladdin R.D." make the implementation of strict within the framework available. two-factor authentication infrastructures Virtual Desktops (VDI)

Illustration: news.myseldon.com

By authorizing with a digital certificate stored "on board" a token and smart card, strict two-factor authentication provides a high level of account protection. And the ability to store key information of various CIPFs on tokens and smart cards makes it possible to use them as a means of authentication, electronic signature and encryption in application software and various electronic services that may be in demand by users of virtual desktops.

Applying JaCarta's line of tokens and smart cards in a variety of scenarios, including rigorous two-factor authentication, is an important step toward providing safety virtual desktops deployed with Base.WorkPlace. Conducted testing showed that domestic products from Aladdin R.D. and Basis offer customers current and safe solutions that are in no way inferior to foreign counterparts, said Sergey Chelyshev, head of integration at Aladdin R.D.

It is important that thanks to the introduction of tokens and smart cards, the company will be able to significantly increase the degree of data security and customer development. A certified thin client does not have access to external storage devices, except for electronic token keys, in the memory of which configuration parameters and data for two-factor authentication can be stored. All major applications run and run on the server, and the user terminal serves only for I/O information. The absence, delimitation of access to data and programs, support for encryption of network traffic allow you to achieve the maximum level of protection, added Yakov Ravshanov, Director of the Client Solutions Department of Basis.

The compatibility certificate confirms the correctness of the BasicWorkPlace software with USB tokens and smart cards of JaCarta PKI, JaCarta PRO, GOST JaCarta-2 and JaCarta-2 PKI/GOST, JaCarta-2 PRO/GOST models. It is recommended to use an Aladdin JCR721 reader to read smart cards.