# US 12,118,377 B2 · Transition to modern management using managed virtual machines > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,118,377 B2 - Document ID: US12118377B2 - Status: Granted - Kind: B2 - Application number: 17/245,243 - Filed: 2021-04-30 - Published: 2022-11-03 - Granted: 2024-10-15 - Earliest claimed: 2021-04-30 - Assignees: Omnissa, LLC - Applicants: VMware, Inc. - Inventors: Stephen Jonathan Parry-Barwick; Maxwell Christopher Fox; Paul Adam Ryman; Yingfeng Ou - Web page: https://patentgrep.com/patent/US12118377B2 ## CPC - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 9/45545: {Guest-host, i.e. hypervisor is an application program itself, e.g. VirtualBox} - G06F 9/4451: {User profiles; Roaming} - G06F 2009/45562: {Creating, deleting, cloning virtual machine instances} - G06F 2009/4557: {Distribution of virtual machine instances; Migration and load balancing} - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Examples of enterprise management using managed virtual machines are described. A host user context configuration can be received from a host management agent. The host user context configuration can include one or more policies. A managed virtual machine user context configuration can be received from a guest management agent within a managed virtual machine. A portion of the host user context configuration can be processed using a translation matrix to identify a configuration service provider (CSP)-based profile that is mapped to a policy from the host user context configuration. A command to enforce the CSP-based profile on the managed virtual machine can be transmitted. ## Claims ### Claim 1 A method implemented by instructions executed by at least one computing device, the method comprising: receiving, from a host management agent executed by a host device separately from a managed virtual machine executed by the host device, a host user context configuration comprising at least one policy of a first management service; receiving, from a guest management agent in the managed virtual machine, a guest user context configuration comprising at least one profile, wherein the guest management agent is associated with a second management service; inputting at least a portion of the host user context configuration into a translation matrix to identify a configuration service provider (CSP)-based profile that is mapped to a policy of the at least one policy; and transmitting, to the guest management agent, a command to enforce the CSP-based profile on the managed virtual machine. ### Claim 2 (depends on 1) The method according to claim 1, wherein the host user context configuration comprises at least one application executed separately from the managed virtual machine on the host device. ### Claim 3 (depends on 1) The method according to claim 1, further comprising: transmitting, to the guest management agent, a command to provision an application of at least one application to the managed virtual machine. ### Claim 4 (depends on 1) The method according to claim 1, further comprising: receiving, from the host device, a user approval of an application that is provisioned to the managed virtual machine; and transmitting, to the host device, a command to delete a host-based copy of the application from a file system of the host device. ### Claim 5 (depends on 1) The method according to claim 1, further comprising: identifying that a threshold percentage of the at least one policy of the host user context configuration are implemented as CSP-based profiles of the guest user context configuration; and identifying that a threshold percentage of host-based applications are included in the managed virtual machine. ### Claim 6 (depends on 1) The method according to claim 1, further comprising: determining that a transition from the first management service to the second management service is completed; and reimaging the host device based on the managed virtual machine. ### Claim 7 (depends on 1) The method according to claim 1, further comprising: determining that a transition from the first management service to the second management service is completed; and imaging another host device based on the managed virtual machine. ### Claim 8 A non-transitory computer-readable medium embodying instructions executable by at least one computing device wherein the instructions, when executed, cause the at least one computing device to at least: receive, from a host management agent executed by a host device separately from a managed virtual machine executed by the host device, a host user context configuration comprising at least one policy of a first management service; receive, from a guest management agent in the managed virtual machine, a guest user context configuration comprising at least one profile, wherein the guest management agent is associated with a second management service; input at least a portion of the host user context configuration into a translation matrix to identify a configuration service provider (CSP)-based profile that is mapped to a policy of the at least one policy; and transmit, to the guest management agent, a command to enforce the CSP-based profile on the managed virtual machine. ### Claim 9 (depends on 8) The non-transitory computer-readable medium according to claim 8, wherein the host user context configuration comprises at least one application executed separately from the managed virtual machine on the host device. ### Claim 10 (depends on 8) The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, cause the at least one computing device to at least: transmit, to the guest management agent, a command to provision an application of at least one application to the managed virtual machine. ### Claim 11 (depends on 8) The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, cause the at least one computing device to at least: receive, from the host device, a user approval of an application that is provisioned to the managed virtual machine; and transmit, to the host device, a command to delete a host-based copy of the application from a file system of the host device. ### Claim 12 (depends on 8) The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, cause the at least one computing device to at least: identify that a threshold percentage of the at least one policy of the host user context configuration are implemented as CSP-based profiles of the guest user context configuration; and identify that a threshold percentage of host-based applications are included in the managed virtual machine. ### Claim 13 (depends on 8) The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, cause the at least one computing device to at least: determine that a transition from the first management service to the second management service is completed; and reimage the host device based on the managed virtual machine. ### Claim 14 (depends on 8) The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, cause the at least one computing device to at least: determine that a transition from the first management service to the second management service is completed; and image another host device based on the managed virtual machine. ### Claim 15 A system, comprising: at least one computing device comprising a processor; and instructions stored in a non-transitory computer-readable medium and accessible by the at least one computing device, wherein the instructions, when executed by the processor, cause the at least one computing device to at least: receive, from a host management agent executed by a host device separately from a managed virtual machine executed by the host device, a host user context configuration comprising at least one policy of a first management service; receive, from a guest management agent in the managed virtual machine, a guest user context configuration comprising at least one profile, wherein the guest management agent is associated with a second management service; input at least a portion of the host user context configuration into a translation matrix to identify a configuration service provider (CSP)-based profile that is mapped to a policy of the at least one policy; and transmit, to the guest management agent, a command to enforce the CSP-based profile on the managed virtual machine. ### Claim 16 (depends on 15) The system according to claim 15, wherein the host user context configuration comprises at least one application executed separately from the managed virtual machine on the host device. ### Claim 17 (depends on 15) The system according to claim 15, wherein the instructions, when executed by the processor, cause the at least one computing device to at least: transmit, to the guest management agent, a command to provision an application of at least one application to the managed virtual machine. ### Claim 18 (depends on 15) The system according to claim 15, wherein the instructions, when executed by the processor, cause the at least one computing device to at least: receive, from the host device, a user approval of an application that is provisioned to the managed virtual machine; and transmit, to the host device, a command to delete a host-based copy of the application from a file system of the host device. ### Claim 19 (depends on 15) The system according to claim 15, wherein the instructions, when executed by the processor, cause the at least one computing device to at least: identify that a threshold percentage of the at least one policy of the host user context configuration are implemented as CSP-based profiles of the guest user context configuration; and identify that a threshold percentage of host-based applications are included in the managed virtual machine. ### Claim 20 (depends on 15) The system according to claim 15, wherein the policy is a group-based policy.