Lenovo Secure Managed Client - Manual (Page 33)

1. Configure your master system so it is ready to be cloned.
2. Restart the machine to a second Windows operating system and capture the
image using an image tool such as ImageX or Ghost. You need a master system
that has Windows Automated Installation Kit (WAIK) installed to configure the
image file you capture. WAIK helps you install, customize, and deploy
Microsoft Windows operating systems.
Note: Lenovo does not provide instructions for the use of ImageX and Ghost.
Please refer to the documentation that is supplied with these image tools.
3. Configure your target system by performing steps including creating and
formatting the partition and restore your image to your target system using the
image tool of your choice.
Note: Since the captured image will be restored to a mounted LUN on the storage
array and will be run on the Lenovo Common Virtualization Platform (LCVP),
more steps are needed to make sure the restored image works as designed. Two
major scenarios are as follows:
Preparing a new Windows Vista image for Secure Managed
Client
The best way to prepare a new Windows Vista image for Secure Managed Client is
to follow the Microsoft guidelines, which are summarized below:
1.
Install and configure Windows Vista on your master system.
2. Create an answer file by using the Windows System Image Manager (WSIM)
install. WSIM enables you to create and modify answer files.
Note: WSIM is part of the WAIK. It helps you to install, customize, and deploy
the Windows Vista family of operating systems. It also enables you to create or
modify answer files on your technician system. This is optional; you can use
the sample answer files provided.
3. Create a Sysprep image of the system. Sysprep helps with image creation and
prepares an image for deployment to multiple destination machines. It will
clean and generalize the system to be deployed.
4. Use the ImageX /capture command to capture the hard disk drive under
Windows Vista PE. ImageX is a command-line tool that captures, modifies, and
applies installation images for deployment in a manufacturing or corporate
environment. ImageX does not do sector-by-sector copy which results a much
smaller image file than other clone tools such as Ghost, popular image tool
which clones a hard drive by sector-by-sector copying.
5. Use the ImageX /apply command to deploy the image to the mounted LUN on
the storage array.
Note: Special steps need to be taken for a Vista image that is ready for
BitLocker. BitLocker Drive Encryption is a full disk encryption feature included
with Microsoft Windows Vista Ultimate. If your system is currently set up for
BitLocker, you should turn it off before capturing or performing a Sysprep for
Secure Managed Client. BitLocker requires at least two partitions to encrypt
drives and verify boot integrity. These two partitions make up a split-load
configuration. A split-load configuration separates the main operating system
partition from the active system partition from which the computer starts. The
Lenovo M58 Preload Vista is ready for BitLocker. See “Redeploying the Lenovo
M58p Vista preload image to the Secure Managed Client environment” on page
30 for more information.
Chapter 6. Secure Managed Client image creation and tuning 25