We’ve had a lot of questions this week from customers wanting to expand their current Tehama secure service delivery environments for use as a general purpose work from home platform in response to coronavirus. If this is something you are considering, the following pointers will help you get started.
- Don’t mix external service providers and employees in the same room. Your employees will need access to a broader range of services than you will have given your service delivery partners, there's no need to compromise security for expediency. Remember it only takes 20 minutes to create a Tehama Room and another 20 to populate it with as many desktops as you need.
- If you are looking at a large deployment, scale out rather than scale up. Deploying multiple Tehama Rooms protects you from possible loss of service due to on-premises Gateway hardware failure.
- If you have significant concerns about service availability and redundancy consider enabling multi-gateway support and deploying Rooms in multiple AWS Regions.
- Spend some time now getting your desktop images right, both in terms of getting your apps set up correctly and identifying the correct virtual machine specification for your different user roles.
You don’t need to pre-provision hundreds of desktops in advance, save your money, all the desktops you need are only a couple of clicks and 20 minutes away. A heads up telling us how many desktops you think you need would be nice though.
- If you are not already committed to sending your workforce home and just want to do a trial, consider using Power Save desktops over Always On (Remember - above about 70 hrs a month, Always On desktops are more cost effective than the hourly billed Power Save desktops).
- If you know you are going to commit to working from home for an extended period, Always On desktops are the way to go.
- Pre-populate your Secrets Store and File Vault with critical resources. The transition to working from home will inevitably expose any weaknesses in your operations, so make sure all your runbooks are accessible and up-to-date. And if you are still keeping passwords on Post It Notes, now is a good time to stop.
- Take 5 minutes and update your Gateways to the current release. At the same time, consider enabling automatic updates to keep your Gateways up-to-date.
- And finally, review your Admin and Manager role assignments. You can’t afford to have management activity become a single point of failure, especially given the current understanding that almost everyone will become ill at some point over the coming weeks/months.
Most importantly, if you have any concerns or questions about how to best employ Tehama as part of your coronavirus response, ask. A quick note to firstname.lastname@example.org is enough to get the ball rolling. Or contact us to get started today.