Secure Workstation

Digital Kit

Secure Workstation

Provide micro and small businesses, as well as self-employed workers, with security, mobility, and collaboration tools at their workstation to enhance productivity.

Solution Price

Only eligible for support:

Companies with up to 3 employees or self-employed workers: €1,000 (1 device)

What Does the Secure Workstation Digital Kit Include?

Features and Services

This solution, provided as a service, includes a hardware device that must incorporate, within the product (and price), a licence that meets the requirements established for Category X. Cybersecurity, including encryption at rest, to ensure the privacy of data and documents stored on the device. Subsidisable devices in this digitalisation solution category can be new laptops or desktop computers; refurbished devices are not eligible. They must have at least the following specifications:

Technical Specifications of the Secure Digital Workstation

In this section, you will find the minimum technical requirements for the computing devices included in the Secure Workstation solution, in accordance with the standards for business digitalisation programmes.

Performance

Processor with 4 cores, 2.9 GHz or higher, released after Q1 2023. Minimum 15,000 points on PassMark. Includes 16 GB DDR4 RAM and 512 GB NVMe SSD with encryption at rest.

Graphics and Display

Integrated or dedicated Full HD graphics. Laptops must have a minimum 13” screen and support for dual monitors.

Connectivity

Wi-Fi 6, Bluetooth 5.1, USB-A and USB-C ports, HDMI 1.4+, RJ-45, 3.5 mm jack. Optional docking station for laptops.

Peripheral Devices

Spanish keyboard (desktop), optical mouse or touchpad, HD camera with shutter, electronic ID card reader (DNI-e), and integrated sound.

System and Support

Professional operating system preinstalled and licensed. Compatible with remote management, MDM, and automatic restoration.

Certification and Sustainability

ENERGY STAR®, EPEAT Silver, or TCO certified. MIL-STD-810H durability. Complies with RoHS, WEEE, and European energy regulations.

Peripheral Devices

Spanish keyboard (desktop), optical mouse or touchpad, HD camera with shutter, electronic ID card reader (DNI-e), and integrated sound.

System and Support

Professional operating system preinstalled and licensed. Compatible with remote management, MDM, and automatic restoration.

Certification and Sustainability

ENERGY STAR®, EPEAT Silver, or TCO certified. MIL-STD-810H durability. Complies with RoHS, WEEE, and European energy regulations.

In the case of desktop computers:

Monitor: If the desktop computer does not have an integrated monitor, a monitor must be provided that meets at least the following requirement:
- Size: the monitor must have a minimum screen size of 23 inches.
- Resolution: the monitor must have a minimum resolution of Full HD.
- Display technology: the monitor must use LCD, LED, or equivalent display technology.
- Interfaces: at least 1 HDMI port.
- Energy label: the monitor must have the European Union energy label.
- Cabling: power cables for the devices are included, as well as an HDMI cable for the computer-to-monitor connection, if applicable..

Learn more about generative AI applied to data analysis at IBM Generative AI.

You can also explore other services available within the Kit Digital.

Minimum Security and Advertising Requirements

These criteria ensure that each device includes advanced protection measures, secure authentication, and proper visual identification, complying with the Recovery Plan regulations and European Union standards

System Security

Includes Secure Boot (or equivalent) to protect against malicious code. Equipped with a TPM, T2, or equivalent chip, enhancing system integrity and reducing cyber risks.

Identification and Labelling

The device will carry an engraved mark or visible label with the logos of the European Union, the Recovery Plan, the Ministry for Digital Transformation, and Red.es. In case of replacement, the new device must maintain the same identification requirements.

Biometric Authentication

Implements facial recognition or a fingerprint reader (hardware or operating system) to strengthen access control to the device.

Label Specifications

Durable label resistant to wear, water, solvents, light, high temperatures, and abrasion. Anti-tamper, permanent, and universal adhesive, withstanding temperatures from –40 °C to +145 °C. Printed with logos and long-lasting indelible ink.

Biometric Authentication

Implements facial recognition or a fingerprint reader (hardware or operating system) to enhance device access control.

Label Specifications

Engraving Option: As an alternative to using labels, each laptop or desktop + monitor may be identified by engraving on clearly visible surfaces, using indelible and non-removable methods. Accepted procedures include pantograph engraving, stamping, thermal engraving, or laser engraving. Any other method requires prior approval from Red.es.

Minimum Requirements for Maintenance and Support Service

Maintenance and Support

From the delivery of the equipment until the end of Phase 2, the Digitalisation Agent ensures continuous technical support to guarantee the proper functioning of the devices.

Preconfigured Delivery

Device delivered in Spain, ready to use, with hardware, software, and updates installed.

Direct Support

Minimum support 8×5, Monday to Friday (09:00–17:00), with an email contact channel.

Remote or On-Site Repair

Incidents resolved remotely or on-site. If transport is required, the digitalisation provider covers the costs.

Maximum Timeframe: 5 Days

If not repaired within 5 working days, a replacement device of equal or higher specifications will be provided until the final repair, at no additional cost to the beneficiary.

Minimum Cybersecurity Requirements

Comprehensive protection to ensure the security of the device and the user.

Protection against malware and spyware

Comprehensive system and external device analysis to detect and remove viruses, trojans, and spyware.

Email and web security

Spam filters, phishing protection, and blocking of malicious ads or links while browsing.

Threat Monitoring and Analysis

Network traffic control, detection of suspicious behavior, and attack prevention.

Security updates and training

Initial setup, regular updates, and training to strengthen the user’s digital protection.

Threat monitoring and analysis

Network traffic control, detection of suspicious behaviour, and attack prevention.

Security updates and training

Initial setup, regular updates, and training to enhance the user’s digital protection.

Possibility of acquiring the associated hardware. Once Phase II of the service has been completed, the beneficiary may acquire ownership of the hardware upon payment to the Affiliated Digitalisation Agent of the residual value of the equipment. The Affiliated Digitalisation Agent is obliged to offer the beneficiary the option to purchase the Secure Workstation. If the beneficiary does not make the payment of the agreed residual amount, the Affiliated Digitalisation Agent may reclaim the equipment. The Affiliated Digitalisation Agent must inform the beneficiary of the purchase value of the equipment at the end of the 12 months of service corresponding to Phase II. The amount to be paid by the beneficiary will be the acquisition value of the equipment and must be reflected in the Digitalisation Solutions Service Agreement. The purchase value shall not exceed 15 % of the amount of the signed agreement (solution cost).

Secure Workstation

Digital Kit