What protocol do you recommend for a Remote Desktop solution, Citrix HDX, VMware Horizon or Microsoft RDP?
ThinLinX offers support for all three of these popular protocols and also other less well known protocols. If you are on a tight budget, RDP may satisfy your requirements while delivering very good performance. Citrix HDX and VMware both have higher costs associated with their particular solutions and both deliver excellent performance. Why not try all three and make up your own mind as to what is the best solution for your deployments?
ThinLinX has just released a new RDP client which is available as a Hotfix, we feel this closes the Gap somewhat between the three options above. Use TMS to download and install the Hotfixes
How do I install a Hotfix to update the TLXOS Firmware?
This is easy, just click on the TMS download icon, select the Hotfixes that you want to install, click on OK. The Hotfixes will be downloaded to the TMS Hotfix directory. Step two, select / highlight all TLXOS devices to be upgraded, click on TMS -> Device -> Install -> Install Hotfix. The selected TLXOS devices will download the Hotfixes from the TMS Hotfix directory, unzip and install them. A reboot is normally required to ensure that the Hotfix installation is permanently saved to storage
How do I install the latest TMS Client?
TMS client is the client end of the TMS connection, the latest version is always integrated into TLXOS releases. As TMS is also under constant development we sometimes need to update the TMS Client between TLXOS releases to enable all the features of a new TMS release to function correctly. As an example the current TLXOS 4.5.0 release contains TMS client version 8.0.2, yet the latest TMS client is version 8.0.3. You can easily install the latest TMS client into TLXOS overwriting the older version.
Click on the TMS download icon, select the TMS client that you want to install, click on OK. The TMS client will be downloaded to the TMS client directory. Step two, select / highlight all TLXOS devices to be upgraded, click on TMS -> Device -> Upgrade -> Upgrade TMS Client. The selected TLXOS devices will download the TMS Client from the TMS client directory, and then unzip and install the new TMS client overwriting the older version.
How do I upgrade the TLXOS Firmware?
Use the TMS Download Icon to download the latest TLXOS Firmware, this will be downloaded and automatically unzipped into the TMS firmware directory. Select all devices of the same class such as all the RPi’s shown on the TMS console, then click on the TMS Upgrade Icon
Why does a US$35 Raspberry Pi computer deliver exceptional Thin Client performance when running TLXOS?
TLXOS includes many optimizations making full use of the H.264 Hardware Decoder which is built into every RPi’s SoC. Remote Desktop Protocols such as Citrix HDX and VMware Horizon Blast Extreme use H.264 to deliver the Remote Desktop to the RPi where it is decoded by the built in H.264 Hardware Decoder
Does ThinLinX offer a Dual Screen solution for the Raspberry Pi?
Yes we provide a Citrix only solution which uses a Raspberry Pi Zero for the second display. Citrix requires their partners to only offer this as a hardware solution, see YouTube demo below for more information
Where do I buy a Raspberry Pi?
Element14 & RS Components are the primary resellers, but many others resell also including Amazon, Ebay etc. You can buy a Raspberry Pi Kit which includes the Raspberry Pi3, a plastic box, a Power supply and an SD Card which is normally preloaded with the NOOBS Boot loader. Just assemble the kit which takes about one minute, power up and select TLXOS from the list of down loadable OS Choices. TLXOS will be downloaded and installed in about 15 minutes. TLXOS easily fits on a 4GB SD Card, you can save some money by assembling your own Kit and buying a blank 4GB or 8GB SD Card, then download TLXOS from the ThinLinX Website to create your own TLXOS SD Cards
How do I install the 30 Day Free Trial of TLXOS for the Raspberry Pi2 or Pi3?
We offer two installation choices, the easiest installation is simply using the NOOBS bootloader SD Card which is available at the online stores that you buy the Rpi from. Boot the RPi using NOOBS while tapping the Shift key, the NOOBS bootloader will download a list of available Operating System installation choices, select TLXOS, click on Install. TLXOS will download and install onto the NOOBS SD Card, this will take about 15 minutes under normal conditions, but during periods of high download demand installation will take longerThe second option is to download our TLXOS RPi installer .exe file by clicking on the ThinLinX Website Downloads Icon and selecting “TLXOS Raspberry Pi SD Card Installer” When you double click the .exe file it runs Win32DiskImager which is designed to write a raw disk image to a removable device. To use this option you will need either a Laptop with a Micro SD Card slot or a USB to SD Card Reader. This is a better option than NOOBS if you are writing many SD Cards with TLXOS as you only download the “TLXOS Raspberry Pi SD Card Installer” once but then can use the installer to create an unlimited number of TLXOS SD Cards.
After TLXOS installation using either method above, on first boot up TLXOS will attempt to connect to the ThinLinX License Server at https://tls.thinlinx.com to Register the 30 Day Free trial. You must be connected to the Internet and not behind a Web Proxy for Registration to succeed. If you have a Web Proxy on your Network you can use the ThinLinX Management Software (TMS) -> Edit -> Settings to configure TMS Proxy Server settings, you then close TMS, reopen TMS and use TMS -> Tools -> Product Registration to Register your 30 Free Trial. If your RPi is in ThinLinX Firmware Maintenance (TFM) Mode due to failure to Register during installation you must use TMS -> Tools -> Product Registration to Register it, then use TMS -> Tools -> Exit Maintenance Mode to return to Normal Mode.
The first TLXOS boot will take a minute or more as TLXOS also runs the apt-get update command to download package lists from the repositories and “updates” them to get information on the newest versions of packages and their dependencies.
See YouTube demo below showing TLXOS RPi SD Card creation
How do I install the TLXOS 30 Day Free Trial for Intel Small Form Factor devices?
See YouTube demo above which is identical to the USB stick installer method with the exception that you download a different image and write the image to a USB stick instead of an SD Card
Download our TLXOS ISFF installer .exe file by clicking on the ThinLinX Website Downloads Icon and selecting “TLXOS Intel Small Form Factor USB Stick Installer” When you run the .exe it launches Win32DiskImager which is designed to write a raw disk image to a removable device. Insert a USB Stick into the PC, double click on the .exe file, this will unpack the TLXOS image and then write it to the USB Stick.You can use a single USB Stick installer to write TLXOS to the local storage on an unlimited number of Intel devices such as Intel NUC’s / Compute sticks etc. To save the cost of an internal Disk Drive, if your Intel NUC has a SD Card slot you can insert a SD Card as the NUC storage device. Insert the USB stick TLXOS installer, boot up while tapping F10, the installer will boot up in ThinLinX Firmware Maintenance (TFM) Mode Blue screen, a 10 second countdown will commence, press a key to stop the countdown, then use the cursor down arrow to select the second choice (Re) Install TLXOS (Warning: DESTRUCTIVE) Press Enter, a second screen will appear where you can select the default boot up Mode, press Enter. The storage device will be auto detected and TLXOS will be written from the USB Stick installer to the Storage deviceAfter TLXOS installation, on first boot up TLXOS will attempt to connect to the ThinLinX License Server at https://tls.thinlinx.com to Register the 30 Day Free trial. You must be connected to the Internet and not behind a Web Proxy for Registration to succeed. If you have a Web Proxy on your Network you can use the ThinLinX Management Software (TMS) -> Edit -> Settings to configure TMS Proxy Server settings, you then close TMS, reopen TMS and use TMS -> Tools -> Product Registration to Register your 30 Day Free Trial. If your Intel device is in Firmware Maintenance (TFM) Mode due to failure to Register during installation you must use TMS -> Tools -> Product Registration to Register it, then use TMS -> Tools -> Exit Maintenance Mode to return to Normal mode
The first TLXOS boot will take a minute or more as TLXOS also runs the apt-get update command to download package lists from the repositories and “updates” them to get information on the newest versions of packages and their dependencies.
How do I install the TLXOS 30 Day Free Trial for Re-Purposing PC’s and Laptops?
Download our RePC installer .exe file or RePC ISO CD Rom image by clicking on the ThinLinX Website Downloads Icon and selecting either “TLXOS Generic X86 RePC USB Stick Installer” or “TLXOS Generic X86 RePC Installer CD ISO version”If you boot a PC or Laptop with the CD Rom Installer inserted in many cases the CD will auto run the TLXOS Installer, in some cases you may have to press either F10 or F12 to select boot from CD.In the case of the USB Stick installer, when you run the .exe it launches Win32DiskImager which is designed to write a raw disk image to a removable device. Insert a USB Stick into the PC, double click on the .exe file, this will unpack the TLXOS image and then write it to the USB Stick. You can use a single USB Stick installer or CD Rom Installer to write TLXOS to the local storage on an unlimited number of PC’s or Laptops. Insert the CD ROM or the USB stick TLXOS installer, boot up while tapping F10, the installer will boot up in the ThinLinX Firmware Maintenance (TFM) Mode Blue screen, a 10 second countdown will commence, press a key to stop the countdown, then use the cursor down arrow to select the second choice (Re) Install TLXOS (Warning: DESTRUCTIVE) Press Enter, a second screen will appear where you can select the default boot up Mode, press Enter. The storage device will be auto detected and TLXOS will be written from the CD ROM or USB Stick installer to the onboard Storage device.
In some cases you may have multiple Hard Disk drives in an older PC or Laptop and may wish to write TLXOS to the Hard drive of your choice instead of allowing the Installer to auto detect the Hard Disk drive to be used for installation. If this is the case in your situation do not interrupt the Installer at the ThinLinX Firmware Maintenance (TFM) Mode Blue screen, allow the 10 second countdown to continue as this will accept the default choice of Upgrade / Recover TLXOS In this case you must wait for the installer to display the message, “Waiting for a Whitelisted Storage device”, then use the ThinLinX Management Software (TMS) / Storage Icon to obtain a list of the available Disk Drives. Uncheck the default “Let clients choose appropriate device” and then select the check box next to the Hard Drive of you choice. Click OK and the TLXOS image will be written to your selected device.
After TLXOS installation, on first boot up TLXOS will attempt to connect to the ThinLinX License Server at https://tls.thinlinx.com to Register the 30 Day Free trial. You must be connected to the Internet and not behind a Web Proxy for Registration to succeed. If you have a Web Proxy on your Network you can use the ThinLinX Management Software (TMS) -> Edit -> Settings to configure TMS Proxy Server settings, you then close TMS, reopen TMS and use TMS -> Tools -> Product Registration to Register your 30 Day Free Trial. If your RePC device is in Firmware Maintenance (TFM) Mode due to failure to Register during installation you must use TMS -> Tools -> Product Registration to Register it, then use TMS -> Tools -> Exit Maintenance Mode to return to Normal mode. The first TLXOS boot will take a minute or more as TLXOS also runs the apt-get update command to download package lists from the repositories and “updates” them to get information on the newest versions of packages and their dependencies.
I use VMware not Citrix, how do I install the VMware Horizon Blast Extreme client for the Raspberry Pi?
This is integrated into the TLXOS 4.5.0 and higher releases, we do release Hotfixes between TLXOS firmware releases which allow you to upgrade the Horizon client if VMware have released an update. You can download the Hotfix by clicking on the TMS Download Icon, select the Hotfix for 4.5.0 – Horizon Client 4.8.0 upgrade, this will download and unzip the Hotfix. Use TMS -> Device -> Install -> Install Hotfix, this will install the Hotfix to all selected TLXOS RPi’s
How do I configure TLXOS Citrix HDX mode to auto connect and auto login?
You must install the new TLXOS 4.5.0 which includes Citrix Receiver 13.7 and supports not only H.264 decode but also the new V2 API, mixed mode H.264 & JPEG. Set the timezone using the TMS Timezone Icon, this must be set to the same Timezone as the Citrix Server. Use TMS to upload the client end SSL Certificate to the RPi’s by selecting the check boxes next to their names, then click on the Upload Icon, Select SSL Certificate, browse to the Directory with the the SSL certificate which must have a .pem extension. Certificates can be exported in either DER (binary) or PEM (ASCII) format. If you export your certificate using Windows it will be DER by default – use the “Base64-encoded” option instead; this is what Windows calls PEM. The “.cer” filename extension doesn’t really mean anything and is used for both formants
Use TMS Mode Icon to select HDX mode put your StoreFront server name (must be the FQDN as exactly it appears in the server’s SSL certificate!) in TMS’ “Hostname[:Port]” box, your logon credentials in the TMS autologin boxes, and (optionally) the name of any application or desktop you want to automatically launch in the “Cmd line arguments” box. The application/desktop name is just the human readable label as it appears in StoreFront or the web UI, and you don’t have to quote it if it contains spaces.
Reboot, The RPi will connect and Log into the Storefront, you will see all your authorised Apps and Desktops, or if you have added the App or Desktop name in the Cmd line arguments box the App or Desktop will auto launch
Ensure that you enabled http basic authentication on the storefront servers
I am using NetScaler and can not connect in HDX mode but Web mode works
Are you using a Netscaler gateway via HTTPS, with the back end HDX servers on your internal network using HTTP? Have your Windows Receiver clients been registry hacked to allow insecure HTTP StoreFront stores? If so, you should be aware that there is *no way* to perform an equivalent hack on Linux Receiver (we have asked Citrix to consider adding this). It is therefore essential that *both* the Netscaler gateway *and* the StoreFront server are configured to use HTTPS, and that the client is able to validate both (has all necessary CA certificates installed). Web mode has no such restriction, which is why it works for you in Web mode but not HDX.
When I attempt to register devices using TMS I get an error “SSL handshake error All product registration requests have been cancelled”
Some versions of Windows are missing the SSL Certificate that TMS needs, you can fix this easily by using Internet Explorer to connect to the ThinLinX License Server at https://tls.thinlinx.com Windows will download and install the missing SSL Certificate, close TMS, reopen TMS and now you will be able to Register your RPis
How does the ThinLinX Management Software (TMS) discover the devices running TLXOS?
There are three discovery methods available to TMS, UDP Broadcast packets which are broadcast at 5 second intervals, (this interval can be adjusted under TMS / Tools / Options), or DHCP Option Flags, or Static discovery which can be configured with a Static IP Address or Hostname.
To manually configure the TMS Discovery method, select TMS -> Device -> Network Configuration -> Configure TMS Discovery. For Static discovery a default Hostname of “tms” has already been entered in the Static and Auto Hostname dialog box by ThinLinX. The advantage of this method of discovery is the System Administrator can set a DNS CNAME which assigns “tms” to the Hostname of the system running TMS. No configuration is required at the client as TLXOS will be able to use DNS to resolve the “tms” Hostname and the default Auto choice will use Static Discovery if DHCP options have not been configured.
Once the Thin Client has been discovered by TMS commands can be sent to it. UDP Discovery can only be used on the same Subnet as Thin Clients, if you are shipping your Thin Clients to a regional Office or they are situated on a different Subnet you will need to use DHCP Option Flags or the third method above.
TMS communicates with the Thin Clients running TLXOS using a secure SSL connection, this allows a Thin Client that has been configured using DHCP Option Flags or the third Discovery method above to be located anywhere in the World. The Thin Clients can even be behind multiple Firewalls as they will tunnel out initiating the SSL connection to TMS
DHCP option flags can be used to pass a default configuration to TLXOS, consisting of TMS location and Port number, the IP Address or name of the Remote Desktop Server to connect to and the Protocol to use such as, WEB, HDX, RDP, RFX etc.
At the moment we have four options but may add others in the future. The Option Flags must all be configured as “Text” not “Integer”
Option 231 point to the TMS location
Option 232 sets the TMS Port number
Option 233 sets the IP, Name or URL of the Server to connect to
Option 234 sets the Protocol, in this case Web or HDX
Option 235 specifies the optional argument to be added to the connection request. e.g. If your Windows Desktop HDX name in Storefront is Windows10 you would add Windows10 as the tlxmode-args value. To connect to a Website in Kiosk mode you would set option 233 to http://wherever/whatever, Option 234 would be web and Option 235 would be –kiosk
When I connect to a Remote Desktop using the Raspberry Pi, I do not hear any Audio
This problem occurs with some Monitors. If TLXOS detects a HDMI Monitor the Audio is output through that, otherwise through the audio Jack. You can use TMS -> Peripherals to force Analog or HDMI
The ThinLinX Management Software (TMS) does not discover my TLXOS device, how can I fix this problem?
The golden rule when using the default UDP discovery mode is to never run more than one instance of TMS at once. When you launch TMS it sends UDP discovery packets with the IP ADDRESS and Port number of the system running TMS, the TLXOS clients connect to that System. If you launch another instance of TMS on a different system it will not see the clients as they have already connected to the other system. Close all the instances of TMS that are running and then just run the one instance The Rpi does not have a Real Time Clock, ensure your DNS is set up correctly as the Rpi needs to resolve names to contact the Time Server. After the clients are discovered you can use TMS to set the IP ADDRESS and Port number of the system running TMS, you would use this mode to manage your clients anywhere in the world from one central location. Use TMS / Tools / Configuration / TMS Server configuration The default UDP discovery only works on the same Subnet TMS is also built into TLXOS, you can even use a RPi in TMS mode if you want to. Just switch the protocol to TMS On some versions of Windows some dll files required by TMS are missing TMServer.exe uses the DLL msvcr100.dll and srvcli.dll which are both in the folder “C:\Windows\SysWOW64\” These DLLs are most likely missing if you don’t have “Microsoft Visual C++ 2010 SP1 Redistributable Package (x86)” installed. Downloaded it from here https://www.microsoft.com/en-us/download/details.aspx?id=8328
What do I do if my USB Keyboard and Mouse do not work on the Intel NUC?
This problem is easily fixed, just boot the NUC while pressing F2 to enter the BIOS, select USB Legacy to on. Depending on the version of the BIOS in your NUC you may have to select USB XHCI to Off. Save the BIOS changes, reboot the NUC
How do I upload a private CA certificate to TLXOS devices to allow them to connect to Storefront servers?
You must use the ThinLinX Management Software (TMS) to install the SSL Certificate. You can install the Certificate to hundreds of TLXOS Devices simultaneously if you wish to. Use TMS / Tools / Install / Install file on device / Install SSL Certificate.
How do I obtain root access on a device running TLXOS?
The O/S has been tightly locked down to help prevent thin clients from being used as an attack vector against servers. Although SSH is installed, it does not support password authentication, and in any case none of the accounts on the system – including root – have password hashes; they are all locked accounts. The only way you can get root access is to SSH in as root using a trusted key. By default, only public keys belonging to ThinLinX developers are listed in /root/.ssh/authorized_keys, but it is possible to use TMS to install more via the Install File on Device option in the Tools menu. The public key that you upload must be in OpenSSH format. On Windows platforms, PuTTYgen (part of the PuTTY suite – http://www.chiark.greenend.org.uk/~sgtatham/putty/) can be used to display the public key of a PPK file in OpenSSH format (copy and paste from the text box at the top – do not use the Save Public Key button, as creates keys in a non-OpenSSH format). If you have trouble logging in add a blank line before and after the pasted SSH key in your text file. That should sort out any compounded confusion over where the line breaks are. Also, please avoid putting non-alphanumeric characters that may potentially cause problems for the Linux shell (such as spaces or single quotes) in the name of your text file.
How do I set up Dual Displays on the Intel NUC?
Use the local Configuration menu or TMS to set up the Displays. The local Configuration menu has an Identify Monitors Tab which makes the set up easier. Select Configure, Displays, under Video Mode, click on Extend Desktop, in the case of the Dual Display DE3815 NUC set Output 2, Position to “Right of” Output 1, ensure the Output 3 Position Tab is set to None, click on Save Settings
HOWTO set up your Printers
USB Locally connected Printers are easy if you are using Citrix or RemoteFX…In the case of Citrix plug the Printer into the NUC, boot the NUC and connect to the Remote Desktop, the Printer will be detected and the drivers will be installed. In some cases Windows won’t be able to find the drivers in which case you will need to go the Printer Manufacturers Website, download and install the Drivers. In the case of RemoteFX, boot the NUC with the Printer attached and then use the ThinLinX Management Software (TMS) to redirect the printer using TMS / Tools / Setup USB Redirection. Select the checkbox next to the Printer and then reboot the NUC to save the configuration. Connect to your Remote Desktop the Printer will be detected and the drivers will be installed. In some cases Windows won’t be able to find the drivers in which case you will need to go the Printer Manufacturers Website, download and install the Drivers.In the case of a USB Printer using standard RDP or a Network Printer you must configure CUPS on the NUC to enable the remote system to see the Printer. Just select Web Mode to launch Chrome and then click on the Configure printers Bookmark at the top left. Chrome will connect to the Local CUPS Server running on TLXOS Please Google CUPS (Common Unix Printing System) for the fine print on how to set up CUPS printing. For the best results when you set up your local printer you should consider providing the Windows PPD file instead of using the closest Linux Printer Driver. This is particularly important for Multi Function Printers where no Linux PPD driver exists Once you have the Windows PPD file extracted from your Windows installation Disk you can use TMS to copy the PPD file to the NUC / Re-PC / Compute Stick / RaspberryPi 2 To copy the PPD file use TMS / Tools / Install File on Device / Select the PPD file When you configure CUPS, select this PPD file Reboot the NUC to save the PPD file to flash You can also configure a Printer using CUPS as a RAW printer where the Server Printer Driver does all the work before sending the Raw data to the Printer We also support Google Cloud Print
Can’t connect to a RDP or RemoteFX session
The most likely cause is the default TLXOS RDP or RemoteFX Security is too low, use TMS to set NLA on. You select Protocol, RemoteFX, click on the Security tab change from the default to NLA
Can’t install TLXOS
The most likely cause is that you removed the USB stick too early, you should wait until the installer prompt for its removal at the appropriate time.
TMS can’t discover the client
Press Control AlT and t Lower case t for terminal This will open an xterm, enter /sbin/ifconfig to see the IP ADDRESS and ping whatever you like. TMS in installation mode uses UDP broadcast, check your Firewall on the Server. You could try installing TMS on a VM and use that or any other version of Windows 7, Windows 8 etc. Please read the installation manual again available from here http://thinlinx.com/download.html We will be releasing Apple Mac and Linux versions of TMS shortly Also once you have installed TLXOS you can use TMS / Tools menu to configure the IP ADDRESS and port number that you want the client running from to use to connect to TMS. This way you can configure devices, ship them and manage them from anywhere in the World. We also have a dhcp options choice where a DHCP server at the client end will supply the TMS Server IP ADDRESS and Port number to connect
How can I start an xterm?
Exit fullscreen or defocus your fullscreen application and then use control-alt-t. And anticipating your next question, no, there is no way to su to root in this window.
How do I get out of fullscreen mode?
It depends on what mode you’re in: HDX: shift-f2. Allegedly. RDP and RemoteFX: control-alt-enter. This will release pointer grab, but the FreeRDP window will still intercept keystrokes while the window is in focus. Spice: shift-f11 (and then shift-f12 to ungrab the keyboard and pointer). VNC: control-alt-shift-f, or use f8 to bring up the configuration menu and click on Full Screen to toggle it off. X11: you can’t, but you can use control-shift to toggle key grab between local and remote window managers. This will allow you to use local keyboard shortcuts such windows-d to show the desktop, control-alt to switch windows and so forth. Everything else: there is no fullscreen mode, you just have a window that’s been sized to fit the current screen resolution. You can use normal window manager controls to resize or minimize it.
Local audio is too loud/quiet, so I can’t make audio quiet/loud enough using remote or web page volume controls. Is there a volume control for local audio playback?
Yes, but right now it’s a bit ugly. Sorry about that. First exit fullscreen or defocus your fullscreen application, and press the control-alt-v key combination. This will bring up an ALSA mixer GUI. The controls that will probably be of most interest to you are DAC2 Digital Coarse and DAC2 Digital Fine..
I tried changing resolution but now my screen is black / my monitor says “scan rate out of range”. I don’t have TMS / can’t get someone else to change settings using TMS. What can I do?
Use the appropriate key sequence to exit from fullscreen mode for whichever protocol you are currently using (see “How do I get out of fullscreen mode”, above), and then press the control-alt-r key combination twice within two seconds. This will cause your client to reset to a safe default resolution (1024×768) and reboot.
Is there a way to bring up the configuration tool other than from the dialog window that comes up after a session has ended? I don’t want to close my application right now.
Yes. First exit fullscreen or defocus your fullscreen application (see “How do I get out of fullscreen mode”, above) and then use the control-alt-c key combination.
My thin client can’t connect to anything and the configuration tool says that it has no IP address. What can I do?
Unplug the network cable, wait at least six seconds, and then plug in back in again. This will reset the interface and trigger a new DHCP request.
Can I share my display with another person (for training or troubleshooting purposes)?
Yes. RDP and HDX (ICA) protocols have their own session shadowing features – which may or may not work with our client implementations – but TLXOS also has a VNC server capability that you can use. To initiate a shadow connection, first exit fullscreen or defocus your fullscreen application (see “How do I get out of fullscreen mode”, above), and then press control-alt-s and enter the hostname or IP address and TCP port number of the shadower in the window that appears. You have the option of either connecting to a listening VNC client over an SSL connection (active mode), or setting up a TCP port forward via an SSH tunnel and awaiting a connection (passive mode). Active mode has the advantage of using ordinary HTTPS and being able to use a web proxy, which makes it suitable for highly secure environments that don’t permit direct connection to the Internet. Passive mode has the advantage of also providing an SSH port forward, allowing SSH as well as VNC access from the remote SSH endpoint. Unlike typical VNC servers, both modes of operation “dial out” to a remote server, which permits traversal of firewalls and NAT gateways and implicitly ensures operator consent. For active mode, the shadowing system must be running stunnel (www.stunnel.org) redirecting to a VNC client application in listen mode (we recommend TurboVNC – www.virtualgl.org). Use of SSL is mandatory. For passive mode, the shadowing system must be running an SSH server that accepts publickey authentication and permits port forwarding, and has a user with a ~/.ssh/authorized_keys file that contains TLXOS’ SSH host public keys. A thin client using TLXOS can do both these things, and can therefore be used to shadow sessions on another TLXOS thin client.
The web browser / Citrix / whatever says that the server SSL certificate is not trusted, but I’m sure that I have installed the correct CA certificate. What’s wrong?
It’s likely that your thin client’s local clock is wrong. To verify this, you can start a terminal using control-alt-t and then enter “date” in the window that appears. This happens because the TLX1000 has no battery-backed clock, so unless it can contact a network time server from which to get the current date and time, it will revert to a nonsensical value such as the year 2000 or 2027 whenever its power is reset. By default, it will try to contact Internet time servers, which may not succeed if there is an intervening firewall or if hostname lookups are failing. To fix the problem, use TMS or the local configuration tool to set the time server to the name or IP address of a local NTP server that the client will be able to connect to. Typically this would be the same as the local DNS server (if it is an Active Directory domain controller) or default gateway (if it is a router appliance).