SprinxleIQ SprinxleIQ™
About Sprinxle About Sprinxle®
Sprinxle for SCCM Sprinxle for SCCM
Sprinxle
Intel vPro Intel vPro®
Sign In Sign In
Activation Services Activation Services

SprinxleIQ™

Based on Intel's MeshCentral software, SprinxleIQ™ provides secure, remote management from the Cloud! The SprinxleIQ™ platform can be used at the hardware layer for Remote Power Management, KVM Control, Bare Metal Imaging and much, much more!

Whether you're managing local devices or have a world-wide team, consider the efficiencies you'll gain by remotely remediating devices - fewer deskside visits, reduced downtime, reduced travel, etc..You'll also significantly improve the Security of your network with the ability to ensure all devices are powered on and operational before you send your patch updates!

pdf icon Architecture Diagram pdf icon Data Sheet pdf icon Management Features pdf icon Security Features

Management at the Hardware Layer

SprinxleIQ
  • Manage regardless of OS or Power state
  • Improve Manageability & Efficiency - reduce down time with Remote KVM & Remote Re-Imaging
  • Improve Security - install all patches with Remote Power On & Re-Image functionality
  • Reduce Costs - reduce deskside visits with Remote KVM & Remote Terminal
SprinxleIQ™ is a remote management solution that is easy to install and use, has very low running costs and offers many features that would only be available in commercial products.
SprinxleIQ
Remote Desktop & Terminal

Possibly the most used feature, SprinxleIQ™ offers web based remote desktop and terminal. You can take control of any computer in the world from any web browser.

SprinxleIQ
Real Time User Interface

The SprinxleIQ™ web interface is fully real-time so users never have to hit "refresh". This makes it easy to see device connections to and activities has they happen.

SprinxleIQ
Remote File Access

Fully access files on any system remotely including download, upload, rename, creating new folders and more. The storage of your own devices accessible from anywhere.

SprinxleIQ
Power State Monitor & Control

Trace when a device is powered on and use your existing live devices to send Wake-on-LAN commands on remote networks allowing remote device power management.

SprinxleIQ
Text and Video Chat

While performing a remote support session, you can initiate a chat session with the remote user. If WebRTC is available, you can even perform a live audit and video chat.

SprinxleIQ
Port Forwarding

Use the router tool to map any local TCP or UDP ports on your local machine to ports on remote devices. Perform RDP or SSH sessions to devices anywhere on the Internet.

SprinxleIQ
Multi-OS Support

The server is built on NodeJS and can be installed on any major operating system. The agent is build in C and has ports for 32 and 64bit Windows, Linux (x86 & ARM), MacOS and FreeBSD.

SprinxleIQ
Multi-User

SprinxleIQ™ fully supports multi-user and multitenancy permitting servers to be used by many people at once with different permissions on device groups for efficient server use.

SprinxleIQ
Intel Active Management Technology

By optionally using Intel® AMT when available, administrators can remotely power on, boot to BIOS and manage a system regardless of the operating system state.

SprinxleIQ
Activity Logs

Trace what users are doing on remote devices with a real-time event log that can be filtered per device or per user. Perfect for auditing management operations.

SprinxleIQ
Server File Storage

Use the server as a file store to upload, download and make files available for public access. Makes it easy to use your SprinxleIQ™ server as a cloud file storage server.

SprinxleIQ
Session Recording

Remote desktop, terminal and Intel® AMT KVM sessions can all optionally be recorded by the server for later playback adding an additional layer of auditing capability.

SprinxleIQ™ was designed with both security and ease of use in mind. The security features present in SprinxleIQ™ make it unique as an open source remote management server.
SprinxleIQ
Two Factor Authentication

Passwords are not sufficient to protect users anymore. With support for two factor authentication, remotely managed assets are better protected against password disclosures.

SprinxleIQ
HTTP Content Security

To secure against any possibility of unwanted cross-site scripting and other attacks, SprinxleIQ™ HTTP headers includes browser instructions to limit the source of content that is loaded.

SprinxleIQ
Let's Encrypt Support

With built-in support for Let's Encrypt, SprinxleIQ™ can obtain a valid TLS certificate for the domain name and auto-renew the certificates making it easy to establish trust to users.

SprinxleIQ
FIDO2 support

With built-in support for hardware authentication keys (Bluetooth, USB and NFC) administrator can setup an extra factor of authentication that defends against fishing attacks.

SprinxleIQ
Strong Cryptography

By default, strong cryptography is used including SHA385, AES256 and RSA3072. This is a step above the industry and recommended good practice for quantum computer resistance.

SprinxleIQ
IP address token binding

All session tokens and cookies generated by SprinxleIQ™ are bound to the requester’s source IP address making it impossible for malware stolen tokens to be reused at a different location.

SprinxleIQ
Use of TLS 1.2

Strong security includes use of strong cryptographic transport protocols. SprinxleIQ™ makes use of TLS 1.2 on it's HTTPS port 443 and disables use of weaker generations of TLS on that port.

SprinxleIQ
Reverse Proxy Support

By supporting reverse proxies, SprinxleIQ™ can be installed in most modern data centers without having SprinxleIQ™ know the main HTTPS private certificate key.

SprinxleIQ
Strong Password Enforcement

By optionally requiring that users make use of strong passwords and requiring use of two-factor authentication, user accounts security can be improved.

SprinxleIQ
HashiCorp Vault Support

SprinxleIQ™ can be configured to retrieve and store all configurations settings and secrets in Vault, making the server stateless and adding an extra layer of protection.

SprinxleIQ
Database Record Encryption

If enabled, SprinxleIQ™ will encrypt all sensitive fields before storing then in the database. This can be done in addition to database provided encryption for extra security.

SprinxleIQ
Strong Password Hashing

By default, SprinxleIQ™ account passwords are hashed using PBKDF2 with 12000 rounds of SHA384 and a 128 byte long salt providing security and dictionary attack resistance.

While it can be used to remotely manage virtually all devices in an In-band manner, SprinxleIQ™ is specifically designed to work with Intel vPro® technology to allow for remote, Out-of-Band management at the hardware layer. How is this accomplished? In a nutshell, when a device goes Out-of-Band, the Intel® hardware within the device uses a network or Wi-Fi connection to communicate back to the SprinxleIQ™ server via a secure CIRA channel, thus allowing you to continue to manage the device.
SprinxleIQ
Use Cases

Client A manages a world-wide sales team with approximately 8,000 endpoints (desktops, laptops, tablets) from headquarters in Boston, MA. A device in the Dubai office crashes. The broken device is overnight shipped to Boston, and a loaner device is shipped to Dubai. Once the device is repaired, the devices are again shipped overnight back to Dubai & Boston, respectively. This leads to lost productivity and significant shipping expenses. Instead, using SprinxleIQ™, IT management in Boston could immediately remediate the device utilizing remotepower management, remote KVM, remote secure erase and remote re-imaging.

Client B manages approximately 3,500 large headless kiosks across the US from headquarters in Dayton, OH. Client B sends technicians to all 50 states to manually remediate each problem kiosk. This requires significant downtime and travel expense. Instead, using SprinxleIQ™, IT management in Phoenix can remotely remediate the device utilizing remote power management, reboot, re-imaging, etc.. resulting in significant savings in labor, travel expenses and downtime.

Client C manages approximately 12,000 endpoints (desktops, laptops) across North America from headquarters in Los Angeles. Corporate IT identifies a security threat and schedules a patch to protect their environment. Unfortunately, not all endpoints receive the patch because were powered off and others were experiencing OS failure. Instead, using SprinxleIQ™, Client C could remotely power-on the devices and install the patch. SprinxleIQ™ could also be used to perform a KVM hardware diagnostic and send a new image to a device to get the patch delivered. This would result in a significant improvement to the security of the environment.