How to incorporate Dell Encryption in a Windows sysprepped image for VDI Usage

Affected Products:

• Dell Encryption
• Dell Data Protection | Encryption

Affected Versions:

• v8.10.1 and Later

Not Applicable

To create a sysprepped image with Dell Encryption installed, follow these steps:

1. If you are planning on using Microsoft’s imagex to capture the image follow the "Install the Windows AIK" and "Create a Bootable UFD" steps from https://technet.microsoft.com/en-us/library/ee523217 to generate a bootable media with a WinPE environment that you use to capture the image once ready, if you are planning on using another imaging software that you can skip this step.
2. Now prepare a primary computer with all the software and settings that are installed and configured, but without Dell Encryption.
3. Install the .Net Framework 4.5 (or later).
4. Install:
   1. Visual C++ 2012 Update 4 (or later) Redistributable Package
   2. Visual C++ 2017 Update 3 or later Redistributable Package (x86 and x64)
5. Run %windir%\System32\sysprep\sysprep.exe and select System Cleanup Action = Enter System Audit Mode and Shutdown Options = Reboot, ensure to select the Generalize check, click OK.
6. The machine restarts and you are automatically logged in as a local administrator, sysprep opens automatically, close it.
7. Perform any eventual generalization tasks that you would perform on your images.
8. Install Dell Encryption using the child installer, it asks for a restart, proceed with it.
9. After the restart you notice that the Shield is *not* present in the system tray, this is expected.
10. Run again %windir%\System32\sysprep\sysprep.exe and select System Cleanup Action = Enter System Out-of-Box Experience (OOBE) and Shutdown Options = Shutdown, ensure to select the Generalize check, click OK (you can also do this from the command line if you want to pass an answers file to sysprep).
11. After the computer shuts down, continue to capture the image with your choice of imaging software.

Once the new image is deployed to a computer and goes through the Welcome phase and specialized configuration pass, gets a computer name, and a user logs in, the Shield activates as normal.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.