Abstract: To provision a client application on a client device, a user may be provided with a QR code, a one-time password, or a manual entry page for starting a credential provisioning process via a credential provisioning service provided by a credential provisioning server in a secure network. The client application may include information on trusted servers operating in the secure network. The credential provisioning server may operate to perform a sequence of actions to verify user credentials and determine, based on rules applicable to the user, the client device, or a combination thereof, whether the client application is to be provisioned on a client device. If so, the credential provisioning server may operate to generate a key pair, obtain a signed certificate, encrypt them, and send them to the client device such that the client application can use them to establish a mutual secure connection with a trusted server.

Abstract: Some embodiments may facilitate boot-specific key access to perform cryptographic operations. A first boot record and a second boot record may be generated independently in response to a request to boot a virtual device. The first and second boot records may be compared and in response to a match between the first boot record and the second boot record, an identify certificate may be obtained. Authorization to access and use a key for cryptographic operations may be obtained in response to a verification of the identity certificate by a cryptographic processor.

Abstract: To provision a client application on a client device, a user may be provided with a QR code, a one-time password, or a manual entry page for starting a credential provisioning process via a credential provisioning service provided by a credential provisioning server in a secure network. The client application may include information on trusted servers operating in the secure network. The credential provisioning server may operate to perform a sequence of actions to verify user credentials and determine, based on rules applicable to the user, the client device, or a combination thereof, whether the client application is to be provisioned on a client device. If so, the credential provisioning server may operate to generate a key pair, obtain a signed certificate, encrypt them, and send them to the client device such that the client application can use them to establish a mutual secure connection with a trusted server.

Abstract: In certain embodiments, a change to a display resolution (or other display configuration) to be used at a physical device may be effectuated without the need to reboot a virtual device associated with the physical device. In some embodiments, a display resolution for a portion of a virtual device user interface of a virtual device is determined based on display configuration information corresponding to a first physical device (e.g., a display resolution of the first physical device). The portion of the virtual device user interface is configured based on the determined display resolution, and the configured portion is sent to the first physical device. In some embodiments, in response to obtaining second display configuration information from a second physical device, the portion of the virtual device user interface is resized (e.g., without rebooting the virtual device), and the resized portion is sent to the second physical device.

Abstract: To provision a client application on a client device, a user may be provided with a QR code, a one-time password, or a manual entry page for starting a credential provisioning process via a credential provisioning service provided by a credential provisioning server in a secure network. The client application may include information on trusted servers operating in the secure network. The credential provisioning server may operate to perform a sequence of actions to verify user credentials and determine, based on rules applicable to the user, the client device, or a combination thereof, whether the client application is to be provisioned on a client device. If so, the credential provisioning server may operate to generate a key pair, obtain a signed certificate, encrypt them, and send them to the client device such that the client application can use them to establish a mutual secure connection with a trusted server.

Abstract: In certain embodiments, a message including a plurality of characters may be obtained from an application hosted on a physical client device and a first position of a user interaction with a user interface accessed via the application may be obtained, where the user interface displays the message. A second position within the message may be determined based on the first position. A first and second set of characters may be extracted from the message based on the second position, such that (i) a first number of characters prior to the second position within the message is extracted for the first set of characters and (ii) a second number of characters subsequent to the second position within the message is extracted for the second set of characters. The first and second set of characters may be sent to the physical client device.

Abstract: Some embodiments may facilitate boot-specific key access to perform cryptographic operations. A first boot record and a second boot record may be generated independently in response to a request to boot a virtual device. The first and second boot records may be compared and in response to a match between the first boot record and the second boot record, an identify certificate may be obtained. Authorization to access and use a key for cryptographic operations may be obtained in response to a verification of the identity certificate by a cryptographic processor.

Abstract: In certain embodiments, a message including a plurality of characters may be obtained from an application hosted on a physical client device and a first position of a user interaction with a user interface accessed via the application may be obtained, where the user interface displays the message. A second position within the message may be determined based on the first position. A first and second set of characters may be extracted from the message based on the second position, such that (i) a first number of characters prior to the second position within the message is extracted for the first set of characters and (ii) a second number of characters subsequent to the second position within the message is extracted for the second set of characters. The first and second set of characters may be sent to the physical client device.

Abstract: In certain embodiments, a change to a display resolution (or other display configuration) to be used at a physical device may be effectuated without the need to reboot a virtual device associated with the physical device. In some embodiments, a display resolution for a portion of a virtual device user interface of a virtual device is determined based on display configuration information corresponding to a first physical device (e.g., a display resolution of the first physical device). The portion of the virtual device user interface is configured based on the determined display resolution, and the configured portion is sent to the first physical device. In some embodiments, in response to obtaining second display configuration information from a second physical device, the portion of the virtual device user interface is resized (e.g., without rebooting the virtual device), and the resized portion is sent to the second physical device.

Abstract: In certain embodiments, a message including a plurality of characters may be obtained from an application hosted on a physical client device and a first position of a user interaction with a user interface accessed via the application may be obtained, where the user interface displays the message. A second position within the message may be determined based on the first position. A first and second set of characters may be extracted from the message based on the second position, such that (i) a first number of characters prior to the second position within the message is extracted for the first set of characters and (ii) a second number of characters subsequent to the second position within the message is extracted for the second set of characters. The first and second set of characters may be sent to the physical client device.

Abstract: To provision a client application on a client device, a user may be provided with a QR code, a one-time password, or a manual entry page for starting a credential provisioning process via a credential provisioning service provided by a credential provisioning server in a secure network. The client application may include information on trusted servers operating in the secure network. The credential provisioning server may operate to perform a sequence of actions to verify user credentials and determine, based on rules applicable to the user, the client device, or a combination thereof, whether the client application is to be provisioned on a client device. If so, the credential provisioning server may operate to generate a key pair, obtain a signed certificate, encrypt them, and send them to the client device such that the client application can use them to establish a mutual secure connection with a trusted server.