Advantech Software Master Windows Embedded Standard Training 2

Tung Yi Agenda

• EEF (EWF, HORM, FBWF ) • Advantech WES Add-ons • How to build a MUI image WES2009 — Enhanced Write Filter (EWF)

• Enhanced Write Filter – Makes Windows XP, Embedded – Allows booting from read-only media – Protects operating system partition – Not necessary to redesign applications • EWFMGR.exe – Console application that provides a command-line interface for managing EWF • EWF API allows control of EWF – Enable/Disable EWF Protection – Commit Changes WES2009 — EWF Concept & Overlays

1) Read Data from the Disk Application that is accessing EWF protected 2) Write Data back to the disk 3) Read Data again

Overlay

Original Disk WES2009 — EWF Overlay Option

• EWF can be configured by applying to multiple volumes, each of which may have Disk or RAM overlays.

• Disk Overlay – Using EWF Volume . EWF Master Volume Table, Overlay stack and Overlay data are stored in the EWF volume . After reboot information retained

• RAM or RAMREG Overlay – Enables stateless operation – After reboot all changes lost – Run without any read/write storage WES2009 — EWF Overlays Disk Partition 1 Partition 2 < 32 MB EWF Disk Disk Overlay C:\ EWF Volume Overlay Protected Volume EWF Partition Disk RAM Partition 1 Partition 2 64 KB C:\ EWF Overlay RAM Overlay EWF Volume Protected EWF Partition Volume Disk RAM Partition 1 RAM-REG C:\ Registry EWF Overlay Overlay Protected EWF volume info Volume stored in registry WES2009 — EWF Hibernate Once Resume Many (HORM)

• EWF feature in WES2009 • Benefits – Quicker boot time – Booting with specific applications and services running • Limitation – All of the partitions on your system must be protected by EWF. – You need to control disk driver if you want to create unprotected volume in HORM. WES2009 — EWF Settings WES2009 — EWF Components

• EWF.sys – Driver which redirects IO requests • EWFDLL.DLL – Used by FBA to format a EWF Partition • EWFNTLDR – Modified NTLDR (NT Loader) • EWFMgr.exe – Management Console Application • EWFAPI.dll – EWF API support library – EWFAPI.H and EWFAPI.LIB WES2009 — EWF

• EWFMGR.EXE – command line program built with the EWF APIs that controls EWF

• EWF APIs allow you to build in EWF control within your applications – Supports Visual C++ application development (EWFAPI.dll) – .NET support is possible – MSDN: Controlling EWF by Using the EWF APIs WES2009 – File Based Write Filter (FBWF)

FBWFMGR Application • FBWF protects a volume on a file level instead of the whole User Mode volume or partition. The Kernel Mode developer can set specific files Volatile Write or directories to be FBWF Cache (RAM) unprotected. – Any writes made to protected files are sent to RAM overlay. Read/Write NTFS / FAT32 Operation for Read/Write – Protected Files Any writes to unprotected files Through are passed through to the disk. Operations Read Only • Features: Volume manger Operation for Protected Files – File and Directory Management Transparency Disk Driver – Selective Write Through – Selective Commits and Restores Read/Write – Improved Overlay Memory Use Storage WES2009 – File Based Write Filter (FBWF)

• EWF and FBWF can exist in the same image, but cannot control the same volume • Some limitations with NTFS – File ID, compression, and encryption • Registry Filter still recommended for domain secret keys and TSCAL registry key support • FBWFMGR and FBWF API are available to control the state of FBWF WES2009 – FBWF Concept #1

1) Read Data from the Disk Application that is accessing 2) File is protected so Data is FBWF protected written back to the overlay volume 3) Read Data again

Overlay

Original Disk WES2009 – FBWF Concept #2

1) Read Data from the Disk Application that is accessing 2) File is unprotected thus is FBWF protected written back to the drive volume 3) Read Data again

Overlay

Original Disk WES2009 – FBWF Settings

• FBWF Configuration – Specify the number of protected volumes – Start FBWF – enabled/disabled – Set the amount of memory to use – Set the cache type – Enable/disable specific OS features • Protected Volume Settings – Specify the drive letter – List the unprotected files Advantech XPe Add-ons Advantech WES Add-ons

• Advantech EWF Manager • Advantech FBWF Manager • Advantech Booting Manager Advantech EWF Manager Advantech FBWF Manager Advantech FBWF Manager Advantech FBWF Manager Advantech Booting Manager Support List Editor

Encrypted Support List

BootingManager.dat BootingManager.exe

Support List Editor EWFManager.dat EWFManager.exe

FBWFManager.dat FBWFManager.exe Support List Editor Demo

Advantech XPe Add-ons How to build a MUI image – Component browser

Component browser

Path: Software System International Infrastructure How to build a MUI image – Settings Lab 2

Build MUI Platform