Preparing and deploying 1E PXE Everywhere boot images

You need a computer with the Configuration Manager console and the PXE Everywhere Admin Tools installed. Configuration Manager requires its Windows PE boot images to present a client authentication certificate. Configuration Manager automatically adds the certificate when deploying images to native Configuration Manager PXE servers, but you need to manually add the certificate to each 1E PXE Everywhere boot image before deployment to PXE Everywhere Agents.

For full details on the 1E tools, and specifically on the available command-line parameters for UpdateBootImage.exe, and CreateBCD.exe, refer to PXE Everywhere tools.

The 1E PXE Everywhere boot image is copied from an existing Configuration Manager boot image, and then modified using UpdateBootImage to add the required certificate, and configure other settings. In most environments only a x64 boot image will be required. If you are managing x86 devices you will also need to prepare a PXE Everywhere boot image for x86, by repeating all the steps for x86.

Copying an existing boot image

Use the following process to copy your existing production boot image ready for modification.

1. On the Configuration Manager site server, open the Configuration Manager Admin Console and from the Software Library workspace expand Operating Systems > Boot Images.
   

2. Right-click the current Boot image (x64) and select Properties, then select the Data Source tab to identify the location of the current boot image.

3. Open that location in Windows explorer and copy the boot.wim file to a folder in a shared location accessible to the CM site server (the location must be accessible using a UNC path and the folder should only contain the boot.wim file). If you have a content source share already created on the site server, that would be an ideal location to create the new folder and copy the boot.wim to.

   PXE Everywhere requires that the boot image is called boot.wim so you should ensure that your copy has this name.

4. In the Configuration Manager console, right-click the Boot Images node and select Add Boot Image.

5. In the Add Boot Image Wizard on the Data Source screen enter the UNC path to the copied boot image and click Next.

6. On the General screen, add the Name - for example 1E PXE Everywhere boot image (x64) - version and any relevant comments you want to include and click Next.

7. On the Nomad Settings screen (if Nomad Branch Admin UI Extensions have been installed), select Enable Nomad and click Next.

8. Click Next on the following screens to complete the wizard.

9. Right-click the new boot image and select Properties.

10. Select the Drivers tab and add any required network or storage drivers required to support your production systems, then click OK.

11. Right-click the new boot image and select Distribute Content to start the Distribute Content Wizard. Add the boot image to a local Distribution Point.

    This step is required before you can update the boot image with a certificate.

12. If you are serving x86 platforms, repeat the above steps to create boot image 1E PXE Everywhere boot image (x86).
    

Updating a 1E PXE Everywhere boot image

Complete the steps in this section to do the following:

• Inject a certificate into each boot image.

• Create a deployment to Stage a 1E PXE Everywhere boot image on the PXE Everywhere Agents, so they can serve the PXE clients on their local subnets.

These update steps must be done on a computer that has the Configuration Manager console and the PXE Everywhere Admin Tools installed. The command line uses UpdateBootImage.exe (installed with the PXE Everywhere Central Admin Tools) to mount the boot image, inject the client authentication certificate and unmount the boot image.

You will also need the certificate used for boot images, provided as a PFX file, and its password.

1. Extract the UpdateBootImageGUI tool and its supporting files from the download ZIP.

2. Open a command prompt (Run as Administrator), change the current directory to the ZIP extract folder, and run 1E.PS.UpdateBootImageGUI.exe

   Field	Details
   SMSProvider Server	Enter the FQDN of the Configuration Manager Provider and hit the Tab key. Note that the Site Code field will now be populated with the site code.
   Boot Image ID	Using the drop-down, select 1E PXE Everywhere boot image (x64) created earlier. Note the WMI File Path\Name field is automatically populated with the path to the boot.wim file.
   Distribution Points	Select one of the Distribution Points that the boot image was previously added to.
   Management Points	Select an available Management Point.
   Certificate Expiry	Select an expiry date. This defaults to one year from today. This may be changed as required in a production environment. When the certificate is about to expire, this process will need to be repeated using a new certificate, and the updated boot images staged to all PXE Everywhere Agents.
   PXEBoot Password	You can optionally set a boot password that would need to be entered by the user on the PXE client in order to load the Windows PE boot image and start any OS Deployment Task Sequence
   Certificate Path	Enter the path to the PFX file that you exported earlier. This optional field is mandatory for injecting the certificate into the boot image.
   Certificate Password	Enter the password for the specified PFX file. This optional field is mandatory!

3. Click the Execute button. The tool will display a dialog box similar to the following, indicating that the constructed UpdateBootImage.exe command line has been copied to the clipboard.
   

4. Start a command prompt (run as administrator).

   • Paste the command line from the clipboard and execute.

   • The process should complete within a couple of minutes and finish with CreateBootMedia returns OK.

5. Close the UpdateBootImageGUI program.

6. Return to the Configuration Manager console, right-click the new boot image and select Update Distribution Points. This will cause the boot image to be ‘regenerated’ and copied to the Distribution Point(s) that it was originally copied to.

7. If you are serving x86 platforms, repeat the above steps to update boot image 1E PXE Everywhere boot image (x86).

The 1E PXE Everywhere boot images are now ready to use in Task Sequences.

Each PXE Everywhere boot image needs to be distributed to the PXE Everywhere Agents before they can be served to PXE clients. This is done using a custom Task Sequence that downloads the boot images then stages them in the TFTP folder structure from where the PXE client will download the relevant x64 or x86 boot image. Staging the boot images in the TFTP folder structure is done using CreateBCD.exe, which is installed on all PXE Everywhere Agents. CreateBCD.exe copies the deployed PXE Boot Image to the PXE Everywhere TFTP\Images folder and creates a boot configuration database (BCD file).

Creating a Task Sequence to stage a 1E PXE Everywhere boot image

To distribute the boot image(s) to the correct locations on PXE Everywhere Agent computers, create a custom task sequence that will be deployed to the computers.

1. In the Configuration Manager console, from the Software Library work space, expand Operating Systems, right-click Task Sequences and from the context menu, choose Create Task Sequence.

2. On the first page of the Create Task Sequence Wizard, select Create a new custom task sequence and click Next.

   • Nomad Settings is only displayed when Nomad Admin Console Extensions is already installed on the Configuration Manager administration console computer you are using. If this is not present, then close the Configuration Manager Admin Console and install the Nomad Admin Console Extensions, and then create/edit the Task Sequence.

   • If Nomad is installed on the Agent computers on which you'll be staging the boot image, then you should use Nomad to stage the boot images.

3. On the Task Sequence Information page, enter a suitable name for the Task Sequence, for example:

   • Stage 1E PXE Everywhere boot image (x64).

   • Stage 1E PXE Everywhere boot image (x86) if you are serving x86 platforms.

4. Click the Browse button and choose the boot image which you created earlier.

5. Click Next.
   

6. On the Nomad Settings page, select Enable Nomad.

   You may want to increase the Cache Priority from the default 1 to ensure the boot image remains in the cache if the cache is cleared to make space for other content.

7. Click Next. Skip this step if you are not using Nomad.
   

8. On the Summary page click Next.

9. On the Completion page click Close.

10. Right-click the Task Sequence and select Edit to add tasks to the Task Sequence.

11. Add a task step to run CreateBCD.exe

    From the Task Sequence editor, add a Run Command Line option with the following properties.

    Name: Stage boot image

    Command line:

    Copy

    "%ProgramFiles%\1E\Client\Extensibility\PXEEverywhere\CreateBcd.exe" -tftpblocksize=8192

    • This command line will work on x64 and x86 platforms, therefore you do not need to configure conditions.

    • If you are upgrading PXE Everywhere, you must remove the existing conditions - click Options tab and Remove All.

    • Legacy versions of PXE Everywhere Agent were x86 only, and required different command lines for Agents on x64 and x86 platforms.

      TFTP Block Size

      • Some hardware may not support block size values higher than 16384 bytes and hence may fail to PXE boot. We recommend you use a TFTP block size of 8192 bytes for best results. A known issue has been observed on some Cisco switches when DHCP Snooping is enabled and a block size greater than 1471 is used. The issue is referenced in the following two Cisco bug reports. If you are affected by this Cisco issue, change the tftpBlockSize to 1471 or lower.

        • Cisco Bug: CSCvk53444

        • Cisco Bug: CSCtw63707

      • The issue may also be present in TP-Link switches.

      • The actual block size used for the tftp protocol is the lesser value of the tftpBlockSize and the MaxBlockSize registry values. Effectively, MaxBlockSize limits the tftpBlockSize specified in the CreateBCD.exe utility.

      • There is only one command-line switch for CreateBCD.exe which is used to set the tftpBlockSize for the RAMDisk (boot image). The notation for this is CreateBCD.exe -tftpBlocksize=blocksize where blocksize is measured in bytes.

12. Click OK to save the Task Sequence.

13. If you are serving x86 platforms, repeat the above steps to create Task Sequence Stage 1E PXE Everywhere boot image (x86).
    

Deploying the Task Sequence to stage a boot image

Each Staging Task Sequence must be deployed to all PXE Everywhere Agents. You will need to create a target Collection that includes all systems that have the 1E Client with PXE Everywhere enabled. You can use the same Collection that you used to deploy the 1E Client, such as the one created by 1E Client Deployment Assistant (CDA). Or you can create a new Collection limited on the 1E Client Collection, or a query-based Collection.

1. From the Configuration Manager console, right-click the boot image staging Task Sequence and select Deploy to start the Deploy Software Wizard.

2. Browse for the target Collection, devices that already have 1E Client with PXE Everywhere enabled.

3. Click Next .
   

4. On the Deployment Settings page, change the purpose to Required and click Next.

5. On the Scheduling page, configure the assignment schedule according to your requirements and click Next.

6. On the User Experience page, uncheck Show Task Sequence progress and click Next.

7. On the Alerts page, click Next.
   

8. On the Distribution Points page under Deployment options, change the option to Download all content locally before starting task sequence is selected. This ensures that Nomad will download the PXE Everywhere boot image associated with the Task Sequence before executing the command lines to stage it in the TFTP folder.

9. Select the options:

   • Allow clients to use distribution points from the neighbor boundary group

   • Allow clients to use distribution points from the default site boundary group

10. Click Next.

11. On the Summary page, click Next. When the wizard completes, click Close.

12. If you are serving x86 platforms, repeat the above steps to deploy Stage 1E PXE Everywhere boot image (x86).
    

When Configuration Manager processes the Task Sequence on Agent computers, the associated boot image will be downloaded to the Nomad and CCM Client caches. The CreateBCD.exe utility copies the cached boot image file to the C:\ProgramData\1E\PXEEverywhere\TFTPROOT\images directory on the computer. This PXE Everywhere Agent is now ready to serve the boot image to PXE clients, refer to Verifying.

Example of the x64 image: