XTRAVIRT LIMITED

Omnissa Digital Workspace Subscriptions (Horizon + Workspace ONE)

Omnissa Horizon and Workspace ONE subscriptions provide access to Omnissa digital workspace software. Horizon delivers virtual desktops and published applications, while Workspace ONE provides unified endpoint management and digital workspace controls. Subscriptions are provided under Omnissa licensing terms and supported through Omnissa support channels.

Features

Virtual desktops and published applications delivered securely from centralised platforms
Unified endpoint management across devices using Workspace ONE policies
Identity and conditional access management integrated with enterprise directories
Remote access to applications from any supported device
Centralised image, application, and user profile management

Benefits

Enable secure remote working without managing local desktop infrastructure
Simplify device onboarding, configuration, and lifecycle management
Improve user experience with consistent access across devices
Reduce operational overhead through centralised workspace management
Support flexible working models while maintaining security controls

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accounts@xtravirt.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

Contact

XTRAVIRT LIMITED Chris Willliams
Telephone: 08004880038
Email: accounts@xtravirt.com

About your service

Service categories

PaaS

Application Platforms

Deployment-centric application platforms

Service scope

Service constraints: This service provides subscription licences only for Omnissa Horizon and Workspace ONE. Buyers must provide and manage all underlying infrastructure, hosting platforms, networks, and end-user devices. Software functionality depends on supported operating systems, browsers, and endpoint types as defined by Omnissa product documentation. Planned maintenance and software updates are governed by Omnissa release schedules. Support is provided in accordance with Omnissa support terms and entitlements. Configuration, integration, and day-to-day operation of the software are the buyer’s responsibility unless separately contracted.
System requirements: Valid Omnissa Horizon and Workspace ONE subscription licences

Supported hypervisor, cloud, or hosting platform for Horizon deployment

Supported desktop or server operating systems for virtual desktops

Compatible endpoint devices and operating systems for Workspace ONE

Network connectivity meeting Omnissa bandwidth and latency requirements

Supported identity provider, for example Active Directory or Entra ID

Supported web browsers for administrative and user access

Endpoint security controls configured according to organisational policy
Cloud deployment model: Public cloud

Private cloud

Hybrid cloud

User support

Email or online ticketing support: Yes
Support response times: Support for Omnissa Horizon and Workspace ONE is provided directly by Omnissa under the customer’s support entitlement. Support requests are raised through Omnissa’s support portals and channels in accordance with Omnissa support terms. Response times, including weekend coverage, depend on the support level purchased from Omnissa.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: No
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: This service is subscription and licence only. The supplier does not provide operational support, managed services, or technical account management.

Support for Omnissa Horizon and Workspace ONE is provided directly by Omnissa under the customer’s purchased support entitlement. Omnissa offers multiple support tiers, which may include different response targets, coverage hours, and escalation paths. The cost of support is determined by Omnissa and is included within, or added to, the Omnissa subscription pricing depending on the selected support tier.

The supplier does not provide a technical account manager, cloud support engineer, or service desk as part of this offering. Any additional advisory or managed support services must be contracted separately.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Users can start using Horizon and Workspace ONE through Omnissa-provided documentation, online resources, and support materials included with the software licence. Xtravirt can provide optional services, including onboarding assistance, architecture guidance, knowledge transfer, training sessions, and professional services, if purchased separately. These services are not included as part of the standard licence-only offering.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: At the end of the contract, users retain full control of their data. Data can be extracted using Omnissa-supported export tools, APIs, and standard platform utilities, including export of configuration data, user information, policies, and reports. Virtual desktop images, application packages, and endpoint data remain on buyer-managed infrastructure and can be retained, migrated, or removed in line with the buyer’s exit processes. The supplier does not hold or retain customer data as part of this licence-only service.
End-of-contract process: At the end of the contract, Omnissa Horizon and Workspace ONE subscription licences expire or are renewed in line with the agreed subscription term. The service includes licence entitlement for the contract period only. No data migration, configuration changes, or decommissioning activities are included. Customers are responsible for exporting, retaining, or removing their data and for decommissioning software in accordance with Omnissa licence terms. Any professional services, advisory support, or assistance with exit activities are outside the scope of this service and would be subject to additional cost if required.
Documentation accessibility standard: EN 301 549

Using the service

Web browser interface: Yes
Using the web interface: Users access Omnissa Horizon and Workspace ONE through vendor-provided web management consoles. Using these interfaces, administrators can configure platform settings, manage users and devices, define access policies, publish virtual desktops or applications, and monitor service status. End users can access applications, desktops, and self-service functions through supported web portals.

Service setup and configuration are performed using Omnissa administrative consoles in line with product documentation. Changes to policies, entitlements, images, and device configurations can be made through these interfaces.

Limitations apply where actions depend on underlying infrastructure, integrations, or licence entitlements. Physical infrastructure provisioning, hypervisor configuration, and network services are outside the scope of the web interface and remain the buyer’s responsibility.
Web interface accessibility standard: None or don’t know
How the web interface is accessible: The web interfaces are provided and maintained by Omnissa. They support standard browser-based access and common accessibility features available within modern web browsers, such as keyboard navigation, zoom, and screen reader support, subject to Omnissa design and implementation. Accessibility behaviour may vary by product version and configuration.
Web interface accessibility testing: The supplier does not conduct independent accessibility or assistive technology testing of the Omnissa web interfaces. Accessibility testing and conformance are the responsibility of Omnissa as the software vendor.
API: Yes
What users can and can't do using the API: Omnissa Horizon and Workspace ONE provide vendor-supported APIs for administration and automation. Using these APIs, users can programmatically manage users and groups, assign entitlements, configure policies, manage devices, publish applications or desktops, and retrieve operational information.

Initial service deployment and core platform setup must follow Omnissa-supported installation methods and licensing requirements. APIs are primarily used after initial setup to automate configuration, changes, and ongoing administration.

Users cannot use the APIs to provision physical infrastructure, modify unsupported platform components, or bypass licensing and entitlement controls. API functionality is limited to features exposed by Omnissa and may vary by product edition and version.
API automation tools: Ansible

Terraform

Other
Other API automation tools: Custom scripts

Vendor-supported SDKs
API documentation: Yes
API documentation formats: HTML

Other
Command line interface: Yes
Command line interface compatibility: Linux or Unix

Windows

MacOS
Using the command line interface: Omnissa Horizon and Workspace ONE provide command line tools and scripting interfaces that support administration and automation tasks. These tools allow administrators to manage users and groups, assign entitlements, configure policies, manage devices, publish or update desktop images and applications, and retrieve operational information.

Initial platform installation and core infrastructure setup must be completed using Omnissa-supported deployment processes and are dependent on the buyer’s chosen hosting or cloud environment. Command line tools are typically used after deployment to automate configuration changes, routine administration, and operational tasks.

Users cannot use the command line interface to provision physical infrastructure, modify unsupported platform components, or bypass licensing, entitlement, or security controls. Available command line functionality is limited to features exposed by Omnissa and varies by product edition, version, and deployment model.

Scaling

Independence of resources: This is a licence-only service. Omnissa Horizon and Workspace ONE software is deployed on buyer-managed infrastructure, where resource allocation, capacity planning, and workload isolation are controlled by the buyer. The supplier does not operate shared infrastructure and therefore does not introduce contention between customers. Each customer’s usage and performance are independent and governed by their own infrastructure design and operational controls.
Usage notifications: Yes
Usage reporting: API

Email

Other
Other usage reporting: Usage, capacity, session, and device metrics are available via dashboards and APIs to support optimisation decisions.
Optimising consumption: Yes
Automatic scaling: Yes

Analytics

Infrastructure or application metrics: Yes
Metrics types: CPU

Disk

HTTP request and response status

Memory

Network

Number of active instances
Reporting types: API access

Real-time dashboards

Regular reports
Resource tagging: Yes
FOCUS resource tagging: Yes

Resellers

Supplier type: Reseller providing extra features and support
Organisation whose services are being resold: Broadcom (VMware), Omnissa, Veeam, Google, AWS, Dell, HP, Dynatrace, Microsoft

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: Yes
Datacentre security standards: Managed by a third party
Penetration testing frequency: Less than once a year
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Physical access control, complying with another standard

Encryption of all physical media

Other
Other data at rest protection approach: Data at rest is protected using Omnissa security features and the controls implemented by the customer. This includes encryption capabilities provided by the platform, access controls, and secure key management where configured. Physical protection of storage media, backup handling, and retention policies are defined and enforced by the customer within their own infrastructure or chosen hosting environment.
Data sanitisation process: Yes
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data Erasure

Backup and recovery

Backup and recovery: No

Data-in-transit protection

Data protection between buyer and supplier networks: Other
Other protection between networks: This is a subscription and licence-only service. The supplier does not operate or connect to a network on behalf of the buyer.

Data in transit protection is implemented and managed by the buyer within their own environment, using Omnissa-supported security controls and industry-standard protocols such as TLS and VPN technologies where required.
Data protection within supplier network: Other
Other protection within supplier network: The supplier does not transmit, process, or handle customer data as part of this service. All network connectivity, encryption, and data-in-transit protections are the buyer’s responsibility and are configured within buyer-managed infrastructure and Omnissa-supported deployment architectures.

Availability and resilience

Guaranteed availability: This service provides software licences only and does not include a guaranteed availability service level. Availability of Horizon and Workspace ONE depends on the customer’s infrastructure design, configuration, and operational practices. Xtravirt can help ensure a design aligned to Omnissa best practices that supports high availability and resilience, where required, through optional advisory or professional services. Horizon and Workspace ONE includes software features that support high availability when correctly designed and configured. As no availability guarantee is provided as part of this licence-only service, no service credits or refunds apply.
Approach to resilience: Horizon and Workspace ONE is designed to support resilient private and hybrid cloud architectures through software features such as workload restart, clustering, and distributed services. The level of resilience achieved depends on how the software is deployed and configured. The service is delivered as software licences only. Datacentre resilience, including power, cooling, physical security, and geographic separation, is provided by the customer’s chosen facilities or cloud provider. Xtravirt can provide optional design guidance aligned to VMware reference architectures to support resilient deployments. Detailed resilience designs are agreed with the customer and are available on request.
Outage reporting: This service provides software licences only and does not include active outage monitoring or reporting by the supplier. Outage information is provided through Omnissa support channels, which may include: Online support portals for case updates Email notifications related to logged support cases There is no public status dashboard or supplier-operated outage API for this licence-only service. Any platform or infrastructure outage reporting is dependent on the customer’s environment and monitoring tools.

Identity and authentication

User authentication needed: Yes
User authentication: Multi-Factor Authentication (MFA)

Identity federation with existing provider (for example Google Apps)

Username or password
Access restrictions in management interfaces and support channels: Horizon and Workspace ONE management interfaces use role-based access controls to restrict access to authorised users. Access is authenticated using Omnissa identity services and permissions are assigned based on platform roles. Support access is provided through authenticated Omnissa support portals associated with the Omnissa licence. Administrative actions and access events are logged in line with Horizon and Workspace ONE security capabilities.
Access restriction testing frequency: Less than once a year
Management access authentication: Multi-Factor Authentication (MFA)

Identity federation with existing provider (for example Google Apps)

Username or password
Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Dedicated device on a government network (for example PSN)

Dedicated device over multiple services or networks

Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)

Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: This service is licence and subscription only. The supplier does not operate, host, or process customer data as part of the service.

The supplier follows documented information security policies and processes aligned to ISO/IEC 27001, including governance, risk management, access control, incident management, and supplier assurance. Policies are approved at senior management level and reviewed regularly. Compliance is enforced through internal controls, mandatory staff training, and periodic audits. Any security incidents related to supplier activities are reported through established escalation and governance channels.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Configuration and change management follow Omnissa product lifecycle and release management processes. Software components are versioned, tracked, maintained, and retired through controlled release processes. Changes are assessed by Omnissa for operational and security impact prior to release, including security testing and vulnerability assessment. Customers control when changes are applied within their own environments.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: Omnissa manages vulnerabilities in line with its product security and maintenance processes. Potential threats are assessed using internal security reviews, vulnerability scanning, and risk analysis during product development and maintenance. Threat intelligence is sourced from internal research, vendor and partner disclosures, industry threat feeds, and responsible security researchers. Security patches and mitigations are developed, tested, and released by Omnissa based on severity and risk, in accordance with the Omnissa maintenance policy. Updates are made available to customers through standard release and advisory channels. Customers are responsible for applying patches within their own environments.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Omnissa implements protective monitoring of its information systems and environments in alignment with documented security practices. Monitoring includes collection and analysis of logs and security events, automated detection of anomalies, and alerting based on known threat patterns. Potential compromises are identified through continuous monitoring, event correlation, and threat intelligence feeds. When a suspected compromise is detected, Broadcom’s security operations teams triage the event, investigate root cause, and initiate containment and mitigation actions in line with documented procedures. Response actions are prioritised based on risk and severity. High-impact security events are addressed promptly according to Omnissa incident response processes.
Incident management type: Supplier-defined controls
Incident management approach: Omnissa operates documented incident management processes for its products and support services. Pre-defined procedures exist for common operational and security incidents. Incidents are reported by users through Omnissa support portals, phone, or other published support channels. Incident updates and resolution information are provided through the support case system. Where applicable, incident summaries and post-incident information are shared in line with Omnissa support and contractual terms. Customers remain responsible for incident management within their own environments.
Post-quantum cryptography secure: No

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

Energy-efficient datacentres: No

Pricing

Discount for educational organisations: No
Free trial available: No

Discount

Provide your minimum discount applicable to your baseline prices: 0.01%

Formula for calculating price of your services

Which of the core deployment models you intend to offer

Private Cloud

Private Cloud - Formula for calculating price of your services

Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
=
Baseline Pricing: See GCloud Service offerings
-
Minimum Discounting: 0.01%
+
Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost: - Customer specific architecture and design
- buyer specific / custom deployment requirements
- Additional licenses for dependent surround services
- integration to existing buyer services
- buyer specific networking, security, identity needs
- allocation of buyer technical specialists to support implementation
-
Additional sources of cost reduction: - use of standardised services
- accelerated deployment timelines
- retirement of existing services

Mandatory certifications

Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

Reseller

Cloud service suppliers you intend to resell with evidence

Organisation 1

Organisation name

Broadcom / VMware