Using Embedded Computers in Edge Computing Kontron Open Platform for Far Edge Micro Clouds ► Turnkey firewall / router with OEMU™ hypervisor for any OS support ► Security by design: hardware root of trust, secure boot and measured boot ► Small footprint (<200 MByte) distribution with cyber-attacks self protection ► Remote fleet management with OpCenter supports remote attestations ► Deploy and protect in a single computer unmodified software from multiple boxPC

Using Kontron computers with SEC-Line is the quickest route to deploy secure edge computer software stacks in todays’ computing infrastructures, leveraging Kontron hardware platforms already qualified for the most demanding industry segments. Embedded computing is rapidly morphing into Edge computing, with always connected systems deployed in the real world. Exposed to logical and physical attacks, they must be continuously monitored, secured and maintained, a challenge which requires specific tools to achieve security, operational efficiency and business agility at the same time in deployments...

For deployed computers, this means monitoring certified sources about critical vulnerability events (CVE) impacting all the software embedded in the computer. Kontron SEC-Line platforms comes with a quarterly bulletin compiling all relevant CVE and their severity. Customers can thus assess their security exposure, and depending on their use case and configuration, act accordingly with configuration workaround, hotfixes or full firmware updates. Avionics The Kontron ACE Flight™ family is a line of products designed to support the digital transformation of commercial avionics. Some models are now...

► TPM-based Secure Boot prevents device refactoring ► Secrets protection : all passwords, encryption keys and certificates are protected by the TPM ► Measured boot using TPM hashing mechanism enables Remote attestation ► Approtect™ protects application software also in Virtual Machines ► Control of device networking (wired, wireless, LTE, VPN) ► Settings management: local via a GUI, remote via OpCenter ► Health monitoring engine, a single view of the system in the CBIT dashboard ► File Access Control: AppArmor restricts software to known usage patterns, seriously limiting the lateral impact of...