How a zero client works
A zero client is the thinnest kind of desktop endpoint. It has a processor or decoder chip, network port, display outputs and USB ports, but no general-purpose operating system for the user to see, no local applications and nowhere to keep user files. Everything the user works with runs on a server, as a virtual desktop or a remote desktop session.
When it powers on, a zero client loads its firmware, finds a connection broker on the network and opens a session. From then on it decodes the screen image sent by the server and sends keyboard, mouse and USB activity back. Power it off and nothing is left on the device, which is why zero clients are called stateless.
Management is central. Administrators set up and update every zero client from one console, and replacing a failed device is a matter of plugging in a new one. The trade-off is that a zero client speaks only the protocols its firmware supports and can do nothing without the server and network behind it.
Types of zero client
The term is used for a few different designs. They share the stateless idea but differ in how they get there.
-
//
Protocol-chip zero clients. Built around a dedicated decoder chip for one protocol, such as Teradici PCoIP, now part of HP Anyware. They have no operating system at all, only firmware.
-
//
Locked-down OS zero clients. Small x86 or Arm computers running a minimal, read-only operating system that boots straight into one remote desktop client, such as Omnissa Horizon (formerly VMware Horizon) or Citrix. Many current zero clients work this way.
-
//
Network-booted clients. Computers that load their firmware over the network with PXE each time they start, then connect to a terminal server. This approach is common in factory HMI systems that manage hundreds of terminals.
-
//
Zero client monitors and all-in-ones. The same electronics built into a monitor or touch panel, so the screen is the whole workstation.
Zero client vs thin client
A thin client keeps a small local operating system, such as a Linux-based thin OS or Windows IoT Enterprise, so it can run several connection clients, a local browser or a few local applications. A zero client strips that away. The difference matters for security, management and flexibility.
| Feature | Zero client | Thin client |
|---|---|---|
| Local operating system | None, or locked-down firmware | Small local OS |
| Protocols supported | One, or a fixed set in firmware | Several, through installed clients |
| Local applications | None | A browser and a few apps possible |
| User data on the device | None | Minimal, can be locked with a write filter |
| Attack surface | Very small | Small, but the OS needs patching |
| Updates | Firmware only, from one console | OS and client updates |
| Boot to session | Typically seconds | Longer, the OS loads first |
| Flexibility if the VDI changes | Low, may need new devices | Higher, install a new client |
In practice the line has blurred. Many devices sold as zero clients run a hidden, read-only OS, and many thin clients can be locked down until they behave like zero clients. Ask which protocols and brokers a device supports, and how its firmware is updated, rather than relying on the name.
Pros and cons of zero clients
Zero clients suit organisations that already run their desktops and applications centrally and want endpoints that need little attention. Their strengths are security, because no data rests on the device and there is almost nothing to attack; easy management, because firmware is the only thing to update; low power use, often under 15 W; and a long working life, because the device does no heavy processing.
The limits come from the same design. A zero client is only as good as its network and server, so a network fault stops every terminal on it. It is tied to the protocols in its firmware, and when a protocol or broker is retired, the devices may need to be replaced. Demanding graphics, video calls and unusual USB peripherals depend on the protocol’s support for them.
Zero clients on the factory floor and in control rooms
Zero clients and network-booted terminals are common in industrial automation. Operator stations connect to central HMI and SCADA servers, so applications are installed and updated once rather than on every machine. That model, and the split between HMI and SCADA roles, keeps plant-floor software consistent across shifts and lines. Control rooms use multi-display zero clients to view several systems from one desk.
Factory and outdoor sites need endpoint hardware built for them: fanless, sealed against dust and moisture, and able to run across a wide temperature range. Industrial mini PCs and panel PCs can work as zero clients, either by network booting or with a locked-down Windows IoT Enterprise or Linux image that opens straight into the remote session.
Quick answers on zero clients
Zero clients: common questions
Does a zero client have an operating system?
Not one the user can see. Protocol-chip zero clients run firmware only. Others run a minimal, read-only OS that boots straight into one remote desktop client and stores nothing.
Can a zero client run Windows?
It can show a Windows desktop. The Windows desktop runs on the server or in a virtual machine; the zero client only displays it and passes input back.
Do zero clients need a server?
Yes. They need a server or cloud service hosting the desktops or sessions, a connection broker and a reliable network. Without them a zero client cannot do anything.
Is a zero client more secure than a thin client?
Usually, yes. With no general-purpose OS and no stored data, there is less to patch and nothing to recover from a stolen device. Security still depends on the server and network.
What is PCoIP?
A remote display protocol. PC-over-IP compresses the desktop on the server and sends it as encrypted pixels. It was developed by Teradici, now part of HP, and is used by many hardware zero clients.
We supply industrial mini PCs and panel PCs for zero-client and network-boot roles, set up with the BIOS boot order, locked-down image or remote desktop client your servers expect as standard.