Oracle Secure Global Desktop is still around? That's what I thought, too!

The first-ever post on was about how New Moon Software, makers of the server-based computing product called Canaveral-IQ, sold to Tarantella in 2003.

Some of you may know the first-ever post on was about how New Moon Software, makers of the server-based computing product called Canaveral-IQ, sold to Tarantella in 2003 (nine years ago!). The Canaveral-IQ product was folded into Tarantella's Secure Global Desktop solution as Secure Global Desktop Terminal Services Edition (SGD-TSE), but failed to make much impact. Later, Tarantella was acquired by Sun, at which point the source for SGD-TSE was licensed to Propalms, leaving the original Secure Global Desktop in the hands of Sun, which of course was eventually bought by Oracle.

In the intervening years, Propalms has sort of fallen off the radar. They are still around, and still selling their version of SGD-TSE (now called Propalms TSE). The other version of SGD, which I believe was called "Enterprise" at one point, is also still around, and I recently had a call with Oracle to talk about what's been going on with it. To be honest, I'd completely forgotten about it, and the first ten minutes of the conversation were filled with me working backwards down the timeline of product names and acquisitions. (That's why I made it the first two paragraphs here :) Afterwards, though, I had a pretty clear picture of what Oracle has been up to since then.

What, exactly, is Secure Global Desktop?

The general idea of SGD is that it does for any internet browser what Sun Ray Server does for Sun Ray Terminals. Essentially, that means that any application input can be sent to any browser in much the same way that pretty much anything you hook into the Sun Ray Server can be delivered to a Sun Ray terminal. It actually has very little to do with "desktops," and is more of an application virtualization solution.

The backend architecture is actually pretty similar as well, although it is different. Essentially, it boils down to this:

Since this is a super high-level depiction, the Sun Ray equivalent would replace the Secure Global Desktop Server with a Sun Ray Server, and the Web Browser with a Sun Ray thin client. The basic idea behind each is that you can basically take any application input (Windows, Linux, custom web, ERP, just about anything, really), feed it through the Secure Global Desktop server, and interact with it remotely via a web browser. Oddly enough, while Sun Ray's use a protocol called ALP, SGD uses a similar, but different, protocol called AIP that is tweaked for browser access. AIP adjusts the experience dynamically, supports caching and compression, and is designed to work without additional WAN acceleration.

Oddly enough, it did almost the exact same thing as part of Tarantella in 2005, but we largely ignored it because we were focused on Windows. You could say SGD was ahead of its time! Of course, at the time, SGD-TSE was the only thing we cared about, so we followed that product (and it's eventual decline) rather than the version that was focused on enterprise, datacenter applications.

Today, though, new life has been breathed into delivering datacenter-based applications to browsers, and Oracle seems poised to take advantage of it. As I mentioned, the "desktop" in the name is a bit of a misnomer, and while SGD does support delivering RDSH and VDI desktops, it does that more or less because it can. It's main goal in life is to deliver any other corporate, datacenter-based, three-tier application to browsers.

Where does it fit today?

There's the bajillion dollar question. On the user side, Secure Global Desktop is a web interface that can provide you with browser-based access to all of your applications. This is agent-based, but with an HTML5 client, could be quite useful. 

At this point, though, you'd probably only go with it if you were already an Oracle shop and had access to all the bits and expertise you needed to pull it off. The end result, though, is still deploying apps to the browser in a non-native way, and we can do that with what we have available to us (and what we are all probably using anyway) with RDS, XenApp, XenDesktop, View, and vWorkspace. Even if we're talking about access to an ERP, there's already Windows clients for those, and we can stand up a system to remote to those really quickly with the techniques we know.

The advantage may come from the mobile side, but support for phones and tablets is still in the "coming soon" phase (along with HTML5 support). Delivering any of these applications to any device via the web interface would be useful, and now is a decent time to get into that space. Still, when I think of Oracle, I don't think "fast moving," or "bleeding edge," so I'm not sure how any of the solutions they release will compare to what else is out there. 

Still, I've heard more from Oracle in the last year than I heard from Sun in the previous five years, so perhaps there is something bigger going on. So I ask you, sometimes vocal Sun/Oracle readers - what do you use this for? Where do you see it going? If I'm just a regular Windows shop, should I still be considering using Oracle SGD?

Join the conversation


Send me notifications when other members comment.

Please create a username to comment.

Good article Gabe...

This is great functionality for Oracle to have in their portfolio when deploying Oracle VDI.  If they package SGD-TSE with Oracle VDI even better.  As is the case with Oracle VM and VDI, they will only have success selling to existing Oracle/SunRay customers in my opinion.  

I would not even considered them competition to Citrix, VMware, and Quest...


The thing is, SGD-TSE does't exist anymore. That's the product that is now Propalms TSE.

Still, SGD does support Windows desktops and applications, and they don't hide that it's one of the primary things that people use with SGD.


Good review Gabe.  

I would like to add for your readers that Oracle Secure Global Desktop is really NOT compared to Citrix, Vmware, Quest.  

Oracle Secure Global Desktop is extremely attractive for environments that want to deploy a remote access solution for secure SSL based access to heterogeneous applications (Linux, Windows, Unix, Mainframe) and even VDI or SBC hosted desktops.    A single product and license gives you a scalable secure gateway,  application publishing using native data-center application protocols (X11, RDP,  SSH, etc.), and a WAN optimized protocol for client browsers.   With the HTML5 mentioned in your "coming soon" the mobile device support for data-center applications will be just enabled along with the existing clients.

So a single Oracle Secure Global Desktop license packs a punch with a ton of value and gets you:

- Secure SSL-VPN Gateway and reverse proxy service that can be separately deployed in the DMZ.

- Horizontally scalable architecture without license restrictions on CPU or Sever counts and is deployed on proven, scalable, reliable Operating systems for little to no downtime (Oracle Linux and Oracle Solaris)

- Datacenter application publishing with native protocols for Windows, Linux, Unix (No additional emulators required)

- Client support for Seamless Windows, Kiosks, Local Window Managers

- Client support for Client Drive Mapping and Universal Printing with pdf

- Client support for Local Application Instantiation, Audio Support for Linux, Unix, Windows Applications

- Support for Active Directory and LDAP directory authentication.

- Support for accessing desktops hosted on Server Based Computing (RDS, TS, Linux, Unix) as well as Oracle VDI hosted virtual desktops.

- Secure application credential caches for optional Single Sign-On capabilities

- Support for Smartcards and Multi-factor Authentication Middleware.

- Mobile device support with HTML5 based upon your "coming soon" reference.

When you combine these features with the ability to securely access the huge portfolio of Oracle Applications from almost any browser,  without the headache of application dependencies, plugins, java etc. you can see why Oracle is investing in the product.


I am happy to read regarding SGD, because it is matured product. We use stilll Tarantella since many years.  We are very happy to deploy our linux and Windows applocation to our remote users. In the past we enhanced the installation with Visulox.


On more update:  Oracle released Oracle Secure Global Desktop 4.7 this morning.  Have a read here:


We use it for Remote Access of the Teleworkers to the Terminalserver or their PCs with RSA Authentication and support of the PDF Viewer, so they can print on their private printers (BYOPrinter) with Company Laptops.

Alternative they (Teleworkers) have Sun Rays at Home, so we use both products in combination, whatever is more approriate.

And I have to support around 600 desks, but only Terminalserver or local PCs, no VDI (compare with Brian Madden's saying, there is no bettter TCO than a WTS, Vmward World 2008)


@turbotiga  Excellent use case and thank you for sharing it.

There are two excellent videos that describe how SGD can be used with VDI and Oracle Applications.  Check them out:

Secure Access to Application and Oracle VDI with SGD

Secure Access to Exalogic Applications with SGD