In April 2023 a new kind of zero clients became available. They are referred to as a “Trusted Zero Clients.” In this article we’ll introduce you to this new type of secure endpoint.
Like a traditional zero client, Trusted Zero Clients utilize the PCoIP protocol by HP Teradici. This protocol keeps the data in the data center by transmitting encrypted pixels between the host computer and the endpoint. This has been a critical security feature of zero clients, and it is also present with the new Trusted Zero Clients.
“Trusted” is in the title because these new zero clients adhere to the “zero trust” security principles, as recommended by NIST and similar organizations. To accomplish this, Trusted Zero Clients incorporate these security safeguards:
- First, Trusted Zero Clients come with a factory-provisioned birth certificate that is verified by Anyware Trust Center software before the Trusted Zero Client is granted access to the network. Once approved, Anyware Trust Center provides a new operational certificate that is also linked to an active software license. This feature prevents counterfeit devices from being connected.
- Second, firmware is locked down with direct secure boot into the Trusted Zero Clients to prevent tampering with firmware, BIOS, or OS.
- Third, a trusted connection is established with the Trusted Zero Client, and the Anyware Trust Center software continuously monitors the Trusted Zero Client for any potential security issues, such as connected peripherals, old firmware versions, or security breaches. FIPS 140-3 Level 1 and Federated Authentication are supported.
Not only do Trusted Zero Clients provide the very best in remoting security, but they also provide outstanding performance. Using PCoIP Ultra version of the software license, Trusted Zero Clients deliver color-accurate, lossless, and distortion-free remote user experience. The software technology automatically adapts to changing network conditions to enable the best possible user experience. It does this by balancing image fidelity, CPU utilization, and network efficiency with multicore CPU scaling to free up valuable CPU resources for heavy workloads and allow for increased server consolidation.
Trusted Zero Clients also offer platform flexibility, allowing connections to HP Anyware, Amazon Workspaces, and VMWare Horizon. This creates near-term options and futureproofing of your hardware.
Trusted Zero Clients offer enhanced A/V user experience with webcam and audio support, and there can be flexibility for various peripherals and wireless network connections, if desired.
As of October 2023, the Trusted Zero Client is new and is not yet full featured. Functionality has increased since launch earlier this year, including support for use with VMWare Horizon. Trusted Zero Clients are still not a viable option for “dark sites” since there is not yet support for SIPR token, and updates require access to the outside world. The ClearCube team is heavily involved with the HP/Teradici team, and we’ll update this blog, our product pages, and our sales team as Trusted Zero Clients add features and functionality. We already have customers testing Trusted Zero Clients, and we are ready to talk to you about your questions and needs to help you determine if you are ready to begin testing Trusted Zero Clients in your environment.
Over the next year at least some of these features should be added, which would make the Trusted Zero Client a more comprehensive solution and a viable alternative to traditional Tera2 chip Zero Clients that still reign as the most secure, lowest maintenance endpoints available.
