Enabling a remote-first working culture during the crisis time with VMware

1. Confidential │ ©2018 VMware, Inc.
VMware Horizon DaaS
for Service Providers
VCPP partners – Tech Deck
April 2020
Eiad AlAqqad(ealaqqad@vmware.com)

2. VMware Desktop as a Service References
Over 64 publicly available VMware Desktop as a Service References:
https://cloud.vmware.com/providers/guided-search, just limit your search to DaaS.

3. Confidential │ ©2018 VMware, Inc. 3
Horizon DaaS 8.x - Agenda
DaaS Use Cases
VMware Vision
Horizon DaaS for VCPP
Architecture and Components
Licensing through VMware Cloud Provider Program (VCPP)
Horizon DaaS 8.0.0 Scaling and Design
Usage Reporting
Q&A

4. DaaS Use Cases
General Desktop
Replacement
Disaster
Recovery
Remote Offices/
Field Workers
Seasonal and
Contract Employees
Mobile
Employees
Reduce
Management
Effort & TCO
Include
Desktops
in DR Plans
Centralize
Desktop
Management
Improve Data
Security & Load
Changes
Full Desktop
to Any
Device
Special
Desktop Needs
(Covid-19)
Flexible
Configuration
Access to desktops
applications and
data across locations
and devices-
including BYOD
without data
residing on endpoint
Flexibility to increase
or decrease
workforce based on
seasonal needs -
may have their own
end-point devices
(e.g. M&As)
Central image
management and
for remote, branch
offices and call
centers
Central image
management and
for remote, branch
offices and call
centers
Central image
management and
for remote, branch
offices and call
centers
Access to desktops
applications and
data across locations
and devices-
including BYOD
without data
residing on endpoint

5. Digital Workspace Experience
Horizon Cloud can easily be paired with Workspace ONE
5
Any Device
Secure access from
From Anywhere
Any Time

6. 6Confidential │ ©2018 VMware, Inc.
VMware Horizon DaaS is our multi-tenanted desktop & apps platform
• Each customer (tenant) has a Horizon 7 management / user experience
• Platform abstracts infrastructure (provider) from consumption (tenant)
• Consumption is PAYG – based on consumed desktop capacity
Horizon DaaS is NOT based on Horizon 7
• Based on Desktone – acquired by VMware in 2013
– Uses VMware components in common with Horizon Enterprise
• Horizon Agent and Client dependencies
• UAG, vSphere, vCenter, Workspace ONE as (bundled or optional) components
• Cross platform development team that serves Horizon 7, Horizon Cloud, Horizon DaaS
VMware's Horizon Cloud Service is powered by Horizon DaaS
• Horizon Cloud has new version every 6 months
• Aim is to bring Horizon DaaS full version update every 12 months
What is Horizon DaaS?

7. Multi-tenancy Scalability Lower Cost
VMware Horizon DaaS Platform Differentiators
Choice Enterprise
Integration
GTM
Hosted
Locally

8. VMware DaaS True Multi-tenancy
Service Provider
CustomersUsers
• Hypervisor
• Virtual Filer
• Virtual Network
• Directory Services
• Access Gateway
• Hypervisor
• Virtual Filer
• Virtual Network
• Directory Services
• Access Gateway
• Hypervisor
• Virtual Filer
• Virtual Network
• Directory Services
• Access Gateway
VMware
DaaS

9. Scalability
Geographic ScaleNumerical Scale
 Grid Based Architecture
 Much lower maintenance
 Automated deployment/maintenance of
new tenants
 High Availability by Default
 Tested to Millions of Desktops
 No Database hassle

10. Lower Cost Model
Grid-based architecture
No database or database
replication to manage
No License Costs
All open source – No
MSFT license costs
Broker Allocator
Inventory
Manager
Session
Manager
Virtual Desktops,
RDS and Apps
RDS
Unified Platform
Unified platform for all
workloads, locations,
customers
Single Vendor
(Leading Hypervisor/SDDC
Stack)

11. Choice

12. Hosted
Desktop
Workspace can be accessed
from anywhere
Reduce costs with session-
based desktop
Use less infrastructure and
reduce management
overhead
The Horizon Difference: Every Kind of Desktop
Persistent
Desktop
Custom experience for knowledge
workers
Get the same desktop every
time you log in
Customize to meet your
unique needs
Install specialized
applications
Non-persistent Desktop
Infrastructure cost savings
Re-usable storage
infrastructure
Most cost-effective
implementation for
task workers
Just-in-Time
Desktops
On-demand creation of
live virtual desktops
Fully personalized desktops
and apps
Scalable to thousands
of users
Optimized infrastructure
usage

13. Same Horizon Clients / Broadest Support for Every Use Case
Same Common Feature-Rich User ExperienceSame Common Feature-Rich User Experience
Multiple Protocols
Choice of Protocols
Hosted Apps &
RDS Desktops
Printing Scanning &
Imaging
Devices
USB Audio In/OutSmart
Card
Client Drive
Redirection
Windows Media
Redirection
File Type
Association
Unified
Communi-
cations
Webcams
Session
Enhancement SDK
RDP VC
Bridge SDK
Blast & PCoIPBlast & PCoIP
Mac iOSLinuxWindows Android Chrome OS HTML (Blast
Only)
Common SDKs
Thin Clients

14. Over 70 Thin Clients Certified for Blast Extreme
Rich client ecosystem
HCL = http://www.vmware.com/resources/compatibility/search.php?deviceCategory=vdm

15. Enterprise Integration
Continue to use all of your existing assets and management platforms with cloud hosted desktops.
Users
Service Provider
VPN
MPLS
Data Center
• Corporate applications
• Group file share
• User document storage
• User profile storage
• Collaboration server
• Source revision control
• Patch management
Enterprise IT Resources
Active Directory

16. Unified Endpoint Management
Manage, Configure, Track, and Automate

17. Workspace ONE: Unified Endpoint Management
Asset Analytics Tracking,
Inventory
System and operations
information for higher SLA
IT Automated
Workflows
For compliance,
remediation, and more
OS/App Lifecycle Management
Cradle-to-grave control over
most changeable assets
Unified Endpoint
Management
PCLM Capabilities
Windows drop ship and macOS
Bootstrap for a
streamlined out-of-box
management experience for
Windows and macOS
Citrix XenMobile lacks key features and is not proven at scale

18. Workspace ONE Integration
Check: https://www.youtube.com/watch?v=7KB9upVMsrY

19. Security &
Compliance

20. Security - Minimal Node Functionality
Hardened Linux
Appliances - No
Windows Patching
Required
Only Accepts
Communication from
Designated Peers
Designed with Least
Privileges Principles
Secure Development
• Common development process
• Developer security tools
• QE security analysis

21. Security - Network Separation
ServiceProvider
BackboneNetwork
vLAN A
VRF Enabled
Router
VRF B
Client A Tenant
Client B Tenant
VRF A
vLAN B
Service Provider has network access to this area
only and no access to desktops
Service Provider has network access to this area
only and no access to desktops

22. 22Confidential │ ©2018 VMware, Inc.
Stop the spread of Ransomware, viruses, etc… (Micro-Segmentation)
Build in Zero Trust at the Most Granular Level of the Data Center?
Every Workload can have:
Individual firewalls
Individual security policies
Policies can be defined based on
any context
VM attributes
Network attributes
Application attributes
PCI
Scope
Network Perimeter

23. 23Confidential │ ©2018 VMware, Inc.

24. Confidential │ ©2018 VMware, Inc. 24
Horizon DaaS 8.x – Additional Features
Platform Features
• Instant Clones
• vGPU
• Skype for Business Plug-in Support
• Workspace ONE (hosted Identity Manager)
• Blast Extreme with Adaptive Transport (BEAT)
• Just in Time desktops (requires App Volumes and
User Environment Manager)
• Horizon Agent 7.3.x and later
• Auto Agent Update
• Auto Agent Pairing
User Features
• Instant Clone desktops
• vGPU
• Skype for Business Multimedia Redirect
• Workspace ONE (hosted Identity Manager)
• Horizon Agent 7.3.x and later
• Next Generation Remoting Experience through BEAT
• HTML5 AppBlast portal
• User Portal remains available

25. Enabling the Business of VMware Horizon DaaS
VMwareHorizonDaaSStack
Data Center
Service Provider
Hardware Options
Go to MarketGo to Market
Business Operations
SW Operations
Horizon DaaS Platform
Hardware
+1 Value-adds+1 Value-adds
BLUEprint

26. The only multi-tenant desktop
virtualization platform in the
market with many DaaS specific
features including:
Unique Architecture:
Multi-tenant, Multi Data Center
Mgmt, Multi-desktop Model, Role
Separation, Grid-Scale, Security, etc.
Technology
Front to back services blueprint for
quick time to market
Tested and highly optimized
Solution Blueprint
Best practices for building,
operating and monitoring
VMware DaaS Platform
100% Channel Model
VSPP Usage Model
Per user/per month pricing
Sales, Marketing & Prod
Management
Pricing, Packaging, Positioning, Lead
Gen, etc.
Built from Day 1 for Service Providers and as
a Service Delivery
Operational Expertise GTM Model

27. Sample Business Case (5,000 desktops)
Margin, 28%
Compute Svrs, 9%
Storage, 8%
VSPP, 29%
Mgmt Svrs, 0%
Labor, 7%
Build out, 1%
HW Maint & supp,
6%
Sales & Mkting, 3%
Power/Cooling, 5%
Bandwidth, 2% Misc DC Infra, 2%
Capital Expenses:
Amortized over 3 years with a
half year ramp
Operational Expenses:
Monthly costs for fees
associated with DaaS offering
MSRP:
$30/desktop/month

28. 28Confidential │ ©2018 VMware, Inc.
Horizon DaaS Platform Components
Compute
Storage
Rack mount, Blades, Hyper
Converged
Shared Storage, VSAN, HCI
Horizon DaaS Appliances
Service Provider, Resource
Managers, and Tenant appliances
Network
VLAN, VXLAN, DVS and VRF support

29. 29Confidential │ ©2018 VMware, Inc.
Horizon DaaS Management Appliances
Cloud Provider
Service Center Portal
Tenant Management and
Support portals
HTML5 clientless, Zero Client or
Horizon Client
• Service Center web based UI for managing the Platform
• Transit point for Cloud Provider operations to all management
appliances.
Service Provider Appliance
• Manages virtual infrastructure, assigns desktop capacity (CPU, RAM,
storage) to tenants - abstracts specifics about the infrastructure from
tenant appliances
• Shared across multiple tenants
Resource Manager Appliance
• Astro Web UI for IT admins to manage their service (pools, apps, group
assignments, golden images, …)
• User Portal web UI for users to access their virtual desktops
• Unified Access Gateway allows secure access to desktops and
applications from external networks
Tenant Appliance and Unified Access Gateway

30. 30Confidential │ ©2018 VMware, Inc.
Horizon DaaS Service Architecture
Cloud Provider NOC
Network Services
(AD, DNS)
Capacity Management, Health Monitoring, Service Management
Cloud Provider
Management
Infrastructure
Management
Assigned Compute and
Storage
Customer A Dedicated Networks Customer B Dedicated Networks
Customer A
Management
Unified Access Gateway Customer B
Management
Unified Access Gateway
Hosted Network
Services
On-Premise Network
Services
Customer B On-Premises
Cloud Provider Resource Management Networks
Assigned Compute and
Storage
vCenter

31. 31Confidential │ ©2018 VMware, Inc.
Horizon DaaS – SP: Capacity and Desktop Models
Multiple Capacity Definitions possible.
Each tenant can have multiple assigned
(e.g. desktop and vGPU definitions)
Desktop Models are multiples of the
Capacity Definition to simplify desktop
host scaling.
Tenants can choose which desktop
model to assign to a pool

32. Horizon Admin: Tenant Admin Layout
Configuration:
• Initial setup
• Domain Registration
• Service Summary
• 2 Factor Auth
Inventory:
• Pattern management
• Application management
• Service Models
Assignments:
• Pool Provisioning
• User & Group Mapping
• Service Management
• Applications
Monitor:
• Dashboard
• Activity
• Reports
• Notification

33. 33Confidential │ ©2018 VMware, Inc.
Horizon DaaS – Tenant: Capacity Consumption
The desktop model determines the size
of each desktop and capacity units
consumption.
Maximum pool size is based on
available capacity and choice of
desktop model

34. 34Confidential │ ©2018 VMware, Inc.
Two Horizon DaaS Bundles available:
• VDI Edition 16 pts / consumed desktop quota
• RDSH Edition13 pts / consumed session or app quota
All include:
• VMware Horizon DaaS Platform (version 8.0.0)
• VMware vCenter Server for Desktop / VMware vSphere Enterprise Plus for Desktop
• VMware Identity Manager Standard Edition
• VMware User Environment Manager
Reporting is manual at the moment – Usage Meter Service integration on the roadmap.
Horizon DaaS Bundles through VCPP – Licensing for 8.0.0
VCPP Product Usage Guide - EULA

35. 35Confidential │ ©2018 VMware, Inc.
Any questions