Last newsletter's theme of security and Trusted Computing reminded me that there was another product I wanted to bring to your attention. Our old friend VMware last month released VMware ACE, which combines security, user autonomy and centralized management of desktop environments. 

My primary use of VMware has always been in a lab or on a stage doing demos. The ability to have multiple simultaneous operating systems (or multiple instances of one operating system, but configured differently) running in one box - either a desktop or a laptop - meant it was much easier to test new applications, services, patches and configurations without investing in a lot of hardware. On the road, it meant quick and easy setup of a demonstration environment for a talk or seminar. But VMware's latest product promises to help with a very different problem - how to ensure security when managing contractor, telecommuter and mobile laptop users.

VMware ACE enables IT desktop managers to quickly and easily provision a customized, secure and standardized PC environment to any unmanaged endpoint (e.g., a telecommuter's home desktop or laptop).

ACE lets you apply enterprise IT policies to a virtual machine containing an operating system, enterprise applications and data. This creates an isolated PC environment known as an assured computing environment (a-c-e, get it?). Using a concept called Virtual Rights Management (VRM) technology, ACE lets you control desktop lifecycles, secure enterprise information on PCs and enforce compliance with IT policies - all while still maintaining end-user autonomy, that is, allowing the user to change their own environment.

ACE creates isolated PC environments that run on top of an existing PC and contain an operating system, enterprise applications and pre-configured security settings.  This allows contractors and telecommuters to access enterprise networks from their own computers instead of having to use a company-supported PC.

In addition, mobile laptop users can protect their data by securing it within an encrypted VMware ACE environment.  ACE protects sensitive information on any PC throughout the extended enterprise through VRM copy protection controls and automatic encryption. In this way, ACE helps prevent theft, tampering and unauthorized duplication of applications, data, system settings and files.