IoT security with Ubuntu Pro for Devices
One subscription for the security maintenance your devices need to stay compliant for up to 15 years.
You get security patches for tens of thousands of open source packages, fleet-wide management from a single pane of glass, and automation tools for compliance with multiple standards, including the Cyber Resilience Act (CRA).
Why Ubuntu Pro for Devices?
-
Up to 15 years
of security maintenance for the kernel, user space and open source libraries
-
Lower TCO
avoid the engineering time spent on OS upgrades, CVE patching, and related application maintenance
-
Tens of thousands
open source packages covered in addition to Ubuntu OS, including real-time kernel and ROS
-
Scalable device management
from a single pane of glass across the lifecycle
-
24/7
optional enterprise-grade support
Meet your compliance requirements faster
Ubuntu Pro for Devices includes automation tooling and packages for FIPS 140, CIS, and DISA-STIG hardening. Canonical is also committed to compliance with the Cyber Resilience Act.
Meet the most rigorous standards:
- Defense Information
Systems Agency (DISA-STIG) - FedRAMP
- NIST
- HIPAA
- FISMA
- Center for Internet Security (CIS)
- FIPS 140
- Cyber Essentials
- CRA
Backed by leading manufacturers
“As new legislation is introduced for IoT embedded devices, it is crucial that our customers have a means to securely maintain the operating system along with commonly used applications and dependencies. Ubuntu Pro ensures that IoT devices receive reliable security patches from a trusted source.”
Ethan Chen
General Manager of the Edge Computing Platforms BU at ADLINK
“Many of our customers from across different sectors are using computer vision software that requires regulatory approval. In particular, the latest US regulation makes it important to provide timely CVE fixes for all of the components used in our products. Thanks to Ubuntu Pro for Devices, this is now covered.”
Jason Huang
Director of AAEON's UP Division
“Ubuntu is the most popular Linux distribution. Many of our public sector customers in the US need FIPS compliance, and Ubuntu Pro for Devices is a perfect solution for them.”
Joe Chen
Director at Advantech
“DFI leverages virtualization technology to introduce a robust Workload Consolidation platform integrated with our embedded solutions for EV charging stations and other cutting-edge industrial applications. With the ability to use Landscape to manage devices built with DFI boards, we can now provide more reliable solutions to our customers with 10 years of security updates and streamlined fleet maintenance.”
Jarry Chang
DFI Product Center General Manager
Everything you get in one subscription
Expanded Security Maintenance (ESM)
ESM provides 10 years of vulnerability fixes for critical, high and selected medium vulnerabilities across the whole Ubuntu archive, as defined by Ubuntu Priority. Expand this to 15 years with the Legacy add-on.
Fleet management with Landscape
Remote patching, update rollout policies, asset inventory, hardening, compliance auditing and reporting across your whole Ubuntu estate, from one interface.
Kernel Livepatch
Livepatch offers a rebootless security patching automation to address high and critical kernel vulnerabilities that surface between scheduled maintenance windows. Eliminate unexpected required reboots for machines requiring mission-critical uptime and maximum security.
Compliance and hardening tools
FIPS 140 certified modules, CIS and DISA-STIG hardening profiles, and the automation to apply and audit them at scale, including in air-gapped environments.
Real-time and robotics coverage
Long-term maintenance for Real-time Ubuntu and ROS ESM, for latency-critical and robotics workloads.
Pay once per device
Ubuntu Pro for Devices can be purchased for a one-time fee per device, covering security maintenance for its entire lifecycle.
Device management included
Manage, deploy, monitor, and scale your fleet with Landscape
Remotely monitor, update, and manage IoT devices with a clearly defined rollout policy.
Landscape reduces the cost of managing open source and enables you to proactively manage security for your IoT devices:
- Get a single pane of glass for managing any Ubuntu instances including system containers, virtual machines, and physical nodes.
- Scan packages automatically for vulnerable versions, and create reports for any cross-section of your Ubuntu estate.
- Perform hardening and auditing at scale in air-gapped environments.
Pull all your software from a secure source
Access thousands of packages and open source applications, already built into your development environment and benefit from updates and security patches for the applications you use on your device. It's securely maintained IoT, as standard.
Develop at speed
with the Ubuntu ecosystem
Speed up go-to-market
Build on the combined expertise of Canonical and hardware partners to get your solution to market faster. Benefit from optimized Ubuntu images for your specific piece of hardware. Canonical continually works to certify the latest hardware for Ubuntu, as well as testing for reliability and performance, ensuring you have the best out-of-the-box experience.
Ubuntu Core
Ubuntu Core is more than just your embedded Linux OS; it's your whole deployment infrastructure. Build targeted production-ready images, unlock over-the-air (OTA) updates, deploy in air-gapped environments, manage your fleet of devices, achieve real-time operations, comply with cybersecurity requirements and more.
Want to know more? Contact our team ›
Resources
Get a comprehensive guide to understanding the new global compliance landscape for IoT devices and manufacturers, and meet compliance in every regional market with our Ubuntu blueprint for secure devices.
On average, organizations developing IoT products will spend 50% more resources on software than hardware. Read our whitepaper to get ahead of costs and design your device, software first.
Defining success across the different stages of the lifecycle: how to plan, implement, operate and retire.
A real-time system ensures the execution of high-priority processes with deterministic response times. Discover what this means for your business in our guide.
AI is breaking out of the data center and moving to the edge. From self-driving cars to industrial assembly lines, the ability to deploy machine learning models on embedded devices and generate real-time, AI-driven insight out in the field offers tremendous potential.
Need to discuss your need with our experts?
Contact us