ewilliams28/FFU
1
0
Fork 0
mirror of https://github.com/rbalsleyMSFT/FFU.git synced 2026-06-14 02:09:35 -06:00
Code Issues Packages Projects Releases Wiki Activity

Updated files

Browse Source
This commit is contained in:
rbalsleyMSFT
2023-02-27 15:31:49 -08:00
parent d06f7a884e
commit 4b959df197
21 changed files with 210 additions and 2336 deletions
Download Patch File Download Diff File Expand all files Collapse all files
FFUDevelopment/BuildFFUVM.ps1
+22 -16
View File
@@ -3,26 +3,33 @@ $rand = get-random
$VMName = "_FFU-$rand"
$VMPath = "c:\VM\$VMName"
$VHDPath = "$VMPath\$VMName.vhdx"
$ISOPath = "E:\software\ISOs\Windows\Windows 11\22H2\en-us_windows_11_consumer_editions_version_22h2_updated_jan_2023_x64_dvd_aafaf7fa.iso"
$ISOPath = "E:\software\ISOs\Windows\Windows 11\en-us_windows_11_consumer_editions_version_22h2_updated_feb_2023_x64_dvd_4fa87138.iso"
$memory = 8GB
$processors = 4
$disksize = 30GB
# 0. Delete old VMs
# 0. Delete old VMs and remove old certs
$certPath = 'Cert:\LocalMachine\Shielded VM Local Certificates\'
$vms = get-vm _ffu-* | ? {$_.state -ne 'running'}
If($null -ne $vms){
Foreach ($vm in $vms){
$OldVMName = $vm.VMName
Remove-VM -Name $vm.name -Force -ErrorAction SilentlyContinue
Remove-Item -Path "C:\VM\$OldVMName" -Force -Recurse -ErrorAction SilentlyContinue
$OldVMName = $vm.VMName
Remove-VM -Name $vm.name -Force -ErrorAction SilentlyContinue
Remove-Item -Path "C:\VM\$OldVMName" -Force -Recurse -ErrorAction SilentlyContinue
Remove-HgsGuardian -Name $OldVMName
$certs = Get-ChildItem -Path $certPath -Recurse | Where-Object { $_.Subject -like "*$OldVMName*" }
foreach ($cert in $Certs){
Remove-item -Path $cert.PSPath -force
}
}
}
# 1. Create Dynamic Hard Disk
mkdir -Path $VMPath -Force
#New-VHD -Path $VHDPath -Fixed -SizeBytes 30GB
New-VHD -path $VHDPath -SizeBytes 128000000000 -LogicalSectorSizeBytes 512 -Dynamic
New-VHD -Path $VHDPath -Fixed -SizeBytes $disksize
#New-VHD -path $VHDPath -SizeBytes 128000000000 -LogicalSectorSizeBytes 512 -Dynamic
# 2. Create VM
# - Name: _FFU
@@ -32,23 +39,22 @@ New-VHD -path $VHDPath -SizeBytes 128000000000 -LogicalSectorSizeBytes 512 -Dyna
# - Networking: Not connected
# - Connect to existing VHD: c:\VM\_FFU\
# - Mount ISO
New-VM -Name $VMName -Path $VMPath -MemoryStartupBytes $memory -VHDPath $VHDPath -Generation 2
$VM = New-VM -Name $VMName -Path $VMPath -MemoryStartupBytes $memory -VHDPath $VHDPath -Generation 2
Set-VMProcessor -VMName $VMName -Count $processors
Add-VMDvdDrive -VMName $VMName -Path $ISOPath
$VMDVDDrive = Get-VMDvdDrive -VMName $VMName
#Use for Win11
Set-VMFirmware -VMName $VMName -FirstBootDevice $VMDVDDrive
If(Get-HgsGuardian -Name 'Guardian'){
Remove-HgsGuardian -Name 'Guardian'
Get-ChildItem -Path 'Cert:\LocalMachine\Shielded VM Local Certificates\' | Remove-Item
}
New-HgsGuardian -Name 'Guardian' -GenerateCertificates
$owner = get-hgsguardian -Name 'Guardian'
#Configure TPM
New-HgsGuardian -Name $VMName -GenerateCertificates
$owner = get-hgsguardian -Name $VMName
$kp = New-HgsKeyProtector -Owner $owner -AllowUntrustedRoot
Set-VMKeyProtector -VMName $VMName -KeyProtector $kp.RawData
Enable-VMTPM -VMName $VMName
#Connect to VM
vmconnect $VM.ComputerName $VMName
#Use if creating for MDT/SCCM Builds
#Get-VM $VMName | Get-VMNetworkAdapter | Connect-VMNetworkAdapter -SwitchName "Intel(R) I350 Gigabit Network Connection - Virtual Switch"
#$networkAdapter = Get-VMNetworkAdapter -VMName $VMName