What are the characteristics of the embedded OS "Windows 10 IoT"?

■ This is an article posted on June 2020, 7, so the content of the information may be out of date.

 

Traditional Embedded license and Windows 10 IoT

Conventionally, in the embedded OS (Windows Embedded), Windows Embedded Standard series, which is installed by selecting only necessary functions based on the kernel of each OS such as Windows 7 and Windows 8, and commercially available Windows 7 Pro and Windows 8 Pro For example, Windows Embedded Enterprise with the same UI was prepared.

Then, the OS generation has moved to Windows 10, and the embedded OS "Windows 10 IoT" has also been released. Here I would like to highlight the features of Windows 10 IoT Enterprise.

Features of Windows 10 IoT

Windows 10 IoT is an operating system that has built-in extensions for Windows 10. Since it is based on Windows 10, you can use Windows 10 applications as they are.
Let's summarize what the characteristics are.

License for specific use

The main uses of PCs equipped with Windows 10 IoT are expected to be as terminals for thin clients and as embedded PCs. It has its advantages on machines that have specific uses.

There is a "lockdown function" as an extension function of Windows 10 IoT (details will be described in a later item), which allows you to limit the functions of the PC. For example, you can implement restrictions such as the applications that can be started and the restrictions on writing to the internal storage. For embedded applications in factory control machines, POS, signage, etc., it is possible to specialize in using only specific applications.

Advantages of fixing the OS version

It is a feature of the Enterprise license rather than a feature of Windows 10 IoT, but it is also an advantage that the period without applying Feature Update is long. In Windows 10, Feature Update will be implemented twice a year, but with Enterprise license there is a long period that you can leave it off, so you can operate without changing the OS version for a long time, OS update This will reduce the burden of evaluating and updating applications.

Multi-language support

Windows 10 IoT Enterprise will support English-based OS with additional languages. In the standard, Japanese is added and supported, but if specified, another language can be added.

OS price varies depending on CPU type

提供formThere are three types, Entry, Value, and HighEnd, and the appropriate license depends on the installed CPU. Depending on the installed CPU, it may lead to cost reduction.

Support options for Semi-Annual Channel (SAC) and Long Term Service Channel (LTSC)

There are two forms of maintenance support for Windows 10 IoT Enterprise. These two types of support cannot be changed later, so you need to select one when ordering.

  • Semi-Annual Channel(SAC)
    Support period 18 months/30 months after release
    3 months for the March release version and 18 months for the September release version.
    An edition with more enhanced security and management functions than Windows 10 Pro.

  • Long Term Servicing Channel(LTSC)
    Support period 10 years after release
    An edition that excludes some functions and is intended for long-term operation.

 

For SAC, you need to apply the Feature Update during the support period and update to the next version. To continue to receive support, you need to continue applying Feature Updates.

On the other hand, LTSC has a fixed function at the time of release, and no Feature Update will be provided thereafter. During the operation period, updates are supported only for the monthly quality update program, and no additional features are added. Since the support period is as long as 10 years after the release, you can continue to use it stably for a long time after starting operation as a special purpose PC.

Lockdown function

A feature of Windows 10 IoT Enterprise is the lockdown function. This function allows the administrator to limit the functions of the PC in advance and operate it as a dedicated machine for a specific purpose.
The lockdown function is a general term for multiple functions, and specifically includes the following functions.

(1) AnimationDisabled

Disables the custom logon welcome transition effect animation.

(2)Branding Neutral

Specifies the UI element to display on the welcome screen.

(3) HideAutoLogonUI

Hides the welcome screen if automatic sign-in is enabled.

(4) NoLockScreen

Disables lock screen features and UI elements.

(5) UIVerbosityLevel

Disables Windows status messages during device startup, sign-in, and shutdown.

(6) Shell Lancher

Disables the custom logon welcome transition effect animation. Different users have different shells available, so you can also launch different shell applications for different users or groups of users.

(7) KeyboardFilterService

You can use shortcut keys to prevent bad key presses and key combinations.

(8) Unified Write Filter

Unified write filter function (UWF). It is sometimes used in so-called "power off".
It is a function that can limit writing to the storage, and by not writing to the storage immediately after booting, if the storage is SSD, it will be no problem to turn off the power at any time (in the case of HDD , There is a possibility that the head will not be able to retract due to rotation, so it is not supported.)

However, although it can be realized for practical purposes, it is basically a function to prevent extra data from being written and to prevent the user from rewriting the system. We do not recommend using it for cutting. It is assumed that you will use it at your own discretion.

Besides this, as one of the functions in the same category as the lockdown function,Removable Storage AccessMay also be used. This is a function that uses the OS standard function group policy to set the permission level range for external devices. You can set three permission levels (port level, class level, device level).

By using the functions such as OS standard Removable Storage Access and the above IoT original lockdown function together, it is possible to build an environment more suitable for special purpose dedicated machines.

Summary

By using Windows 10 IoT Enterprise as a machine for embedding devices or thin client terminals and utilizing the lockdown function according to the application, it will lead to highly stable systems and improved usability of devices.

The usefulness of SAC and LTSC for maintenance support also varies depending on the appropriate installation purpose and operation plan, so please consider them along with the issues related to the application of Feature Update.

In addition, we have a lot of experience in proposing configurations with Windows 10 IoT Enterprise. Please feel free to contact us when considering.