LEAF OS delivers a secure computing environment to access virtual desktops and virtual apps for Microsoft AVD, RDS, and Windows 365, Citrix, VMware Horizon, vSpace Pro Enterprise, VERDE VDI and Remote Access, from any x86-64 PCs, laptops or thin clients.

LEAF OS endpoint solution addresses concerns related to security, corporate data leakage, patch management and central manageability for companies with working-from-home and BYOD initiatives using personal devices.
A bootable USB memory stick can be created containing LEAF OS. Any x86-64 hardware device can boot to LEAF OS and instantly becomes a locked-down NComputing thin client.
Push configurations and software updates to a LEAF OS USB stick or device via NComputing’s PMC Endpoint Manager software. No local user data means centralized backups are simplified, and ongoing maintenance and security expenses are slashed.
LEAF OS does not replace the underlying operating system when booting from a USB stick. When users finish their work, simply reboot from the native OS providing an ideal work-from-home environment.

LEAF OS helps companies to save money by getting out of the PC refresh cycle. Put off forced investment in new hardware until it makes sense for you.
LEAF OS can be used to repurpose PCs and laptops by converting any x86-64 hardware from a stand-alone computer to a dedicated thin client by installing directly onto an internal hard drive and removing the old system and files. This method extends the usefulness of aging computers using end-of-life operating systems like Windows 7 while giving users powerful up-to-date desktops.
Push configurations and software updates to a LEAF OS device via NComputing’s PMC Endpoint Manager software. No local user data means centralized backups are simplified, and ongoing maintenance and security expenses are slashed.

NComputing LEAF OS is a next-generation software endpoint solution that transforms any x86-64 thin clients into a secure and centrally managed endpoint. We have customers using LEAF OS to repurpose outdated Dell Wyse and HP thin clients into high-performance, secure locked-down endpoints, with the support for the latest client receivers from Microsoft AVD, RDS, Citrix, VMWare and other popular VDI platforms. 

As long as the device meets the following requirements, LEAF OS will be able to run on the device: 

• Standard x86-64 compatible processor, based on either BIOS or UEFI motherboard firmware with USB boot support. Secure Boot is supported. 
• The system should have at least 8GB flash/HDD storage. 
• The system should have at least 2GB RAM. 4GB or more RAM is required for use cases relying heavily on local Linux applications.  

LEAF OS device license comes with a perpetual license to use NComputing’s PMC Endpoint Manager software. LEAF OS devices can be easily configured using PMC. The PMC admin can remotely manage LEAF OS devices including software updates over local and wide-area networks, locations behind firewalls and NAT-routers through an easy-to-use, web-based user interface.
PMC comes with automatic discovery, check-in and configuration provisioning of new devices making deployment easy. Administrators can setup device profiles complete with all settings and configurations, then push the profile to individual or grouped devices. Only a few clicks are needed to schedule device firmware updates, access the summary dashboard or view the detailed event logging. Users are always up-to-date with the latest technology.

LEAF OS also comes with an integrated local Chromium browser, providing additional flexibility such as web kiosk mode or productivity mode with direct access of web content and web apps without desktop virtualization. Other popular applications such as local Microsoft Teams and Zoom are also integrated.

Yes, LEAF OS includes the following popular VPN clients and supported authentication methods:

• OpenVPN client – username with password, client certificate with password.
• OpenConnect VPN client – username with password, client certificate with password.
• PPTP – username with password.
• FortiClient SSL VPN client – username with password.
• IPSec 
  • L2TP/IPsec VPN – pre-shared key, username with password.
  • IKEv2/IPsec VPN – client certificate with password.

The simplest way to install LEAFOS is to boot the target PCs, Laptops or Thin Clients using a bootable USB stick that runs LEAF OS with the following 2 options:

1. Live boot LEAF OS using USB flash memory stick: Your device will boot LEAF OS from the connected USB flash drive. There will be no changes to the PC/laptop’s internal HDD.
2. Flash LEAF OS into the internal drive of the device: The contents of your device’s internal drive will be wiped and replaced with LEAF OS. When you boot the device, LEAF OS will be directly booted from the internal drive.

For larger installations, a PXE boot server can be set up to boot LEAF OS from a server on a network.

The simplest way to install LEAFOS is to boot the target PCs, Laptops or Thin Clients using a bootable USB stick that runs LEAF OS with the following 2 options:

1. Live boot LEAF OS using USB flash memory stick: Your device will boot LEAF OS from the connected USB flash drive. There will be no changes to the PC/laptop’s internal HDD.
2. Flash LEAF OS into the internal drive of the device: The contents of your device’s internal drive will be wiped and replaced with LEAF OS. When you boot the device, LEAF OS will be directly booted from the internal drive.

For larger installations, a PXE boot server can be set up to boot LEAF OS from a server on a network.

In order for your computer to boot from a USB flash drive, you need to make sure that:

1. A bootable LEAF OS USB flash drive is created (use at least 2GB or higher capability). Use a flashing application like the Win32 Disk Imager or balenaEcher to write the LEAF OS image into your USB flash drive.
2. Have access to:
   1. Computer Boot Menu, or
   2. The USB flash drive is prioritized in the Boot devices menu of your BIOS/UEFI panel.

Please refer to the LEAF OS(x86-64) live boot from USB flash drive guide for details.

LEAF OS can also be flashed directly to the internal hard drive, turning any x64 PC or laptop (with BIOS or UEFI motherboard firmware) into a permanently repurposed, high-performance thin client.
Use a bootable LEAF OS USB flash drive to boot the target PC/laptop/thin client. Once the LEAF OS UI is up, navigate to the ‘Installation’ tab and click on ‘Install’. There are additional warning messages to inform the admin/user that the ‘Install’ process will permanently erase the internal storage of the selected device.
The device is converted to a fully locked-down, centrally managed, high-performance LEAF OS endpoint.

LEAF OS can be flashed directly to the internal hard drive, turning any x64 PC or laptop (with BIOS or UEFI motherboard firmware) into a permanently repurposed, high-performance thin client. LEAF OS can ‘repurpose’ PC/laptop/thin client devices with the following internal storage types:

• HDD
• SSD
• eMMC
• NVMe

LEAF OS software can be downloaded from the software download page.

Yes, NComputing will periodically release updates to the LEAF OS software. You can apply the update using NComputing’s PMC Endpoint Manager software.
The LEAF OS device license also comes with complimentary 1st year device AMP coverage (i.e., software maintenance update). After the 1st year, additional coverage of device AMP is required to receive firmware updates.

Each LEAF OS device (PC/laptop/thin client) requires its LEAF OS device activation license (perpetual). The LEAF OS device license also comes with complimentary 1st year device AMP coverage (i.e., software maintenance update), and complimentary perpetual use of NComputing’s PMC Endpoint Management solution.

The following is the LEAF OS device activation license SKU:

• LeafOS-P (perpetual license)

After the 1st year, additional coverage of device AMP is required to receive firmware updates.

Device AMP (software maintenance) – (optional):

The following device AMP (software maintenance) renewal durations are available after the 1st year of coverage: 

• NC-AMP-RXRDP-1A (one additional year)
• NC-AMP-RXRDP-2A (two additional years)
• NC-AMP-RXRDP-3A (three additional years)
• NC-AMP-RXRDP-4A (four additional years)

VERDE Client connections from LEAF OS are supported and require separate VERDE Seat licensing.
Two license types are supported. Both are concurrent connection models:

• VERDE-WFH-1A-10 (VERDE VDI Suite - Remote Access 10-seat license, annual subscription)

This license type allows Remote Access connections to PCs through the VERDE Connection Broker and is the most affordable option.

• VERDE8-CCU-1A (VERDE VDI Suite 1-seat license, annual subscription)

This license type allows Remote Access connections to PCs through the VERDE Connection Broker and supports connections to VDI sessions hosted by VERDE Servers.

If you’re downloading LEAFOS software for the very first time from the software download page or LEAFOS product page, you will receive a one-time 30 days trial LEAF OS device activation license (1 seat) sent by email. If you have a project which requires more trial licenses, please contact your regional NComputing team.

LEAF OS device activation perpetual license (SKU: LeafOS-P) can be purchased from your NComputing authorized partner or reseller.

A new PC, laptop or thin client can be activated with LEAF OS by entering the LEAF OS device license key.

Each LEAFOS device comes with a 1-year subscription to AMP. This allows the device to receive firmware updates applied locally or pushed from NComputing PMC Endpoint Management Software. When the AMP license expires the device can no longer receive firmware updates. Subscription to AMP must be purchased and applied to the device in order to once again be able to push firmware updates from PMC. An active AMP license must be maintained to receive the described benefits. Renewing an expired AMP license is applied retroactively to the date that the previous license expired.

AMP is a software maintenance and support program provided by NComputing to allow LEAFOS devices to receive the latest firmware updates. Each device must have its own current AMP license to continue to receive firmware updates. An active AMP license must be maintained to receive the described benefits. Renewing an expired AMP license is applied retroactively to the date that the previous license expired.