Frequently Asked Questions

TLXOS Security Features

TLXOS is designed with security as a core principle. Its architecture emphasises immutability, isolation and controlled access.

• Read-only core with RAM disk overlay — runtime changes live in tmpfs and disappear on reboot.
• Instant factory reset — Ctrl+Alt+R twice locally, or remotely via TMS.
• Encrypted remote access — VNC with SSL, full TMS management over HTTPS, RDP with NLA.
• Built-in VPN — WireGuard (native) and OpenVPN.
• Live USB isolation — RePC Live boots entirely in RAM.
• Password-protected configuration — lock Tlxconfig to prevent unauthorised changes.
• Secure licensing — encrypted trial and perpetual keys; licences can be revoked if a device is lost or stolen.
• Diskless PXE option — no local storage means minimal physical attack surface.

How does licensing work?

TLXOS licences are perpetual. Your entitlement lives on our licence server (tls.thinlinx.com). The file installed on the device is simply offline proof that a registration exists. While the token is present the device continues to operate indefinitely (trial licences expire after 30 days).

Use free TMS to install or reinstall proof-of-licence. The server that runs TMS needs HTTPS access to tls.thinlinx.com (proxy settings are available if required).

What hardware is supported?

TLXOS runs on the entire Raspberry Pi range (including Pi 5 and Zero), Intel/AMD small form-factor devices (NUCs, Compute Sticks and clones) and most x86-64 PCs and laptops via the RePC edition. Minimum requirements are very modest: less than 1 GB RAM and 2 GB storage for single- or dual-display use.

Is TMS free?

Yes. ThinLinX Management Software is free when used with TLXOS devices. There are no licence limits and no mandatory support contracts.

Where can I get help?

Visit the ThinLinX Help Desk for the knowledge base, how-tos and release notes, or email sales@thinlinx.com. We normally reply within a few hours during Australian business hours.