Today, Microsoft announced their intent to extend their Server Virtualization Validation Program (SVVP) with an Additional Qualification for third party hypervisors, such as Citrix XenServer, to support some Windows Server 2016 virtualization-based security features (VBS), notably Credential Guard (CG) and Device Guard (DG). Windows Server VMs running on SVVP validated platforms will be able to leverage the new VBS capabilities to strengthen the isolation of a number of security-sensitive components and deliver enhanced security for Windows applications and desktops.
Citrix and Microsoft continue to work together to deliver value for our joint customers; Citrix has participated in the SVVP for several years to ensure that all versions of XenServer are validated under the SVVP requirements. SVVP validation ensures that Microsoft will support instances of Windows Server running virtualized on XenServer, with both companies cooperating on technical support cases via the TSANet multi-vendor technical support community. Citrix and Microsoft customers can therefore deploy Windows Server VMs on XenServer with confidence, safe in the knowledge that XenServer has been tested and proven to be a first-class platform for Windows Server, and with the backing of cross-vendor technical support.
Citrix has long recognized the value of delivering enhanced security and helps securely isolate applications and desktops by using XenServer combined with hardware virtualization technologies. Extending hardware-assisted isolation into the VMs themselves will enable the security benefits of hardware virtualization to bring even greater protection for the apps and data of Citrix customers. This is a big win for our customers, as using XenServer along with Windows CG and DG solutions provides enhanced security.
Microsoft’s plans to expand the SVVP program create the opportunity for future versions of XenServer to formally support VBS-based features, such as Credential Guard within Windows VMs. We look forward to working with Microsoft on bringing joint solutions based on these technologies to our customers.