Cameyo: Security & Infrastructure Deep Dive - February Webinar Q&A Recap

Hello everyone!

Following up on our recent March webinar Q&A recap, it’s time for the February edition (and soon enough the December recap will come too)!
 

To make sure no stone is left unturned, we've gathered all the questions asked during the first session of the year and categorized them below for easy reference.

As usual, if you're still curious about a specific feature or use case, please feel free to drop your thoughts in the comments below!

🖥️ Cameyo & Device Compatibility

Does Cameyo work with ChromeOS Flex?
Absolutely. It is fully compatible and performs excellently on ChromeOS Flex devices.
 

Is USB Passthrough supported on Cameyo?
We support the WebUSB API, which allows many peripherals to function seamlessly. However, devices that require silent driver installations on Windows or specific hardware encryption keys may not be compatible at this time.

Can I use hardware devices like Smart Cards?
While WebUSB supports many printers and scanners, redirected support for encrypted USB pass-through (required for Smart Cards or USB authentication tokens) is currently on our product roadmap.

⚙️ Technical Infrastructure & Administration

Can servers be deployed to a Sole Tenant Node within GCP?
If the configuration can be managed via tags, it may be possible. Otherwise, the environment would need to be configured as a self-hosted deployment.

Are there best practices for integrating with AWS?
Currently, we do not offer "Bring Your Own AWS" (BYO-AWS) support, so AWS deployments are treated as self-hosted. If you have a specific use case, we’d love to deep dive into your requirements - please post in the community and we can get back to you.

💻 Application & User Experience

Can we use a general Google Drive for persistent data instead of individual user drives?
Yes. In addition to personal drives, users can access Shared Drives (formerly Team Drives) and "Shared with Me" folders. These connections are established once the user authenticates and grants the necessary permissions.

Is there a list of unsupported applications?
While most productivity apps work well, the following are generally not supported:

• High-end gaming and intensive video editing software.
• Applications that cannot run in a multi-session environment.
• Certain developer-centric use cases (though these can be evaluated on a case-by-case basis).

Can I run OBS via Cameyo to capture video/audio from a ChromeOS device?
No, this specific use case is not currently supported.

🔒 Security & Policy

How is application isolation handled? What prevents a user from accessing other processes or the Command Prompt?
By default, we do not block other processes within a session. However, administrators can easily restrict access and harden the environment using PowerTags, GPOs, or third-party security policies to prevent unauthorized access to the Windows Terminal or other apps.

Does accessing Windows File Servers (SMB) require integrated Windows users for authorization?
Not necessarily. Users can access file servers using temporary profiles and, if required, authenticate to specific shares using their standard network credentials.