Citrix Adds a Linux-Powered Escape Hatch For Compromised Windows PCs

Citrix Adds a Linux-Powered Escape Hatch For Compromised Windows PCs (nerds.xyz) 3 Citrix's Desktop as a Service (DaaS) product includes a lightweight, hardened second operating system called UniconOS (once called "eLux") to offer Windows customers a write-protected file system Citrix says is secure against computer viruses and other malware. Nerds.xyz reports: According to the company, the environment remains isolated from the Windows filesystem and uses Secure Boot protections covering the shim, bootloader, kernel, and initial RAM filesystem. That separation matters when ransomware encrypts Windows or a faulty update leaves the operating system trapped in a boot loop. Instead of repairing Windows immediately, an employee can boot into UniconOS and use Citrix DaaS to access virtual applications and desktops. Citrix SecurAccess with Chrome Enterprise provides access to internal web applications under the organization's existing security policies. In other words, UniconOS does not actually fix the damaged Windows installation. It gives employees another route to their applications while the IT department investigates or repairs Windows... [T]he installer shrinks the Windows volume, creates a new partition, copies UniconOS onto it, and registers the necessary boot entries. Windows remains the default operating system during ordinary use, although administrators can configure boot delays and fallback behavior... The approach could prove useful following a widespread ransomware attack or another defective Windows update resembling the CrowdStrike incident of 2024. Recovery would happen independently on every compatible endpoint instead of requiring IT employees to physically handle thousands of computers. Thanks to Slashdot reader BrianFagioli for sharing the news. Citrix SecurAccess with Chrome Enterprise provides access to internal web applications under the organization's existing security policies. In other words, UniconOS does not actually fix the damaged Windows installation. It gives employees another route to their applications while the IT department investigates or repairs Windows... [T]he installer shrinks the Windows volume, creates a new partition, copies UniconOS onto it, and registers the necessary boot entries. Windows remains the default operating system during ordinary use, although administrators can configure boot delays and fallback behavior... The approach could prove useful following a widespread ransomware attack or another defective Windows update resembling the CrowdStrike incident of 2024. Recovery would happen independently on every compatible endpoint instead of requiring IT employees to physically handle thousands of computers. Thanks to Slashdot reader BrianFagioli for sharing the news. Dual Boot = News ? (Score:2) Really people? I know sometimes Slashdot gets accused of ads as stories, but this is a joke. This is an ad for a Citrix. Dual boot options to chose a different operating system has been around for decades. You don't need a special version from Citrix to be able to boot into a Linux OS and use VDI, app gateways etc. LOL! (Score:2) Recovery would happen independently on every compatible endpoint instead of requiring IT employees to physically handle thousands of computers. LOL! How do you think that would work? Good luck even talking end users through getting a second OS booted. And after they get it booted, then what? They're going to fix their non-bootable Windows system, without IT, from a Linux environment that they've probably never seen in their entire life? IT will have to fix each one individually. The only time savings that this might provide is if it provides IT remote access to the system once it's booted. That's something we used to inject into the Windows recovery You invented the live distro / rescue disc again (Score:2)