Deploying Windows Embedded Security Patches using Wyse Device Manager 5.7.1 or earlier versions Deployment Guide
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners. 2018-06 Rev. A00
Contents 1 Introduction...4 Support matrix...4 Deployment overview...5 2 Create an RSP package using Wyse Device Manager... 6 RSP script structure... 6 RSP script structure for Windows Embedded Standard 7... 6 RSP script structure for Windows Embedded Standard 7P...8 RSP script structure for Windows 10 IoT Enterprise LTSB build 1507...10 RSP script structure for Windows 10 IoT Enterprise LTSB build 1607...12 3 Register a package...15 4 Deploy a package... 16 Contents 3
1 Introduction Dell has stopped releasing RSP-based security packages for thin clients running the following operating systems: Windows Embedded Standard 7 Windows Embedded Standard 7P Windows 10 IoT Enterprise LTSB version 1507 Windows 10 IoT Enterprise LTSB version 1607 You must directly download the security patches from support.dell.com. This guide provides information about creating and deploying an RSP package by using Wyse Device Manager (WDM) 5.7.1 or earlier versions. Topics: Support matrix Deployment overview Support matrix Table 1. Supported platforms Operating system Windows Embedded Standard 7 Windows Embedded Standard 7P Windows 10 IoT Enterprise LTSB build 1507 Supported platforms Wyse 3030 thin client 3290 Wyse 7010 thin client Z90D7 Wyse 7010 Extended Chassis thin client Z90DE7 Wyse 5010 thin client D90D7 Wyse 7020 thin client Z90Q7 Wyse 5020 thin client D90Q7 Wyse 7020 thin client Z90Q7P Wyse 7020 accelerated graphics thin client Z90QQ7P Wyse 5020 thin client D90Q7P D90D7P Z90D7P Wyse 7040 thin client Wyse 5060 thin client Latitude 3460 mobile thin client Latitude E7270 mobile thin client Wyse 7020 thin client Z90Q10 Wyse 5020 thin client D90Q10 Wyse 7020 accelerated graphics thin client Z90QQ10 4 Introduction
Operating system Supported platforms Wyse 7040 thin client Windows 10 IoT Enterprise LTSB build 1607 Latitude 3480 mobile thin client Latitude 5280 mobile thin client Wyse 5060 thin client Table 2. Management server details Management server Version Supported database WDM 5.7.1 or earlier versions Windows Server 2008 R2 Deployment overview The security patch deployment include the following tasks: 1 Create an RSP package. See, Create an RSP package using Wyse Device Manager. 2 Register the package. See, Register a package. 3 Deploy the package. See, Deploy a package. Introduction 5
Create an RSP package using Wyse Device Manager 2 1 Go to support.dell.com. 2 Expand Download Wyse Software and Drivers. 3 Click Wyse Support Download. 4 Download the latest WDM package for your respective operating systems which must be taken as a reference or template to create the RSP structure. 5 Extract the package to the default path <drive C>\WDM Packages. The extracted content from KBs are listed in <drive C>\WDM Packages. 6 Delete the Readme file. 7 Delete existing.msu file in the QFE folder, and place the new.msu file for creating the WDM Packaged.RSP format. 8 Rename the folder to KB<number>_<operatingsystem>. For example, KB4074587_WES7. 9 Rename the folder structure as follows: Rename the main folder to KB<number>_<operatingsystem>. For example, C:\WDMPackages\KB4074587_WES7. Rename the subfolder in the KB<number>_<operatingsystem> folder to KB<number>_<operatingsystem>. For example, <drive C>\WDMPackages\KB4074587_WES7\KB4074587_WES7. 10 Copy the downloaded.msu file to the QFE folder <drive C>\WDM Packages\KBname_WES7\KBname_WESP\QFE. NOTE: You must rename KB to include the KB number for creating an RSP package. 11 Rename the.rsp file available in the main folder (C:\WDM Packages\KBname_WES7) to KB<number>_<operatingsystem>. 12 Edit the.rsp script based on your operating system as described in RSP script structure. RSP script structure This chapter provides information on the RSP structure for different operating system, that is required to create a package. RSP script structure for Windows Embedded Standard 7 [Version] ;Modify the KB number in the below format to the KB name which you are trying to create Number=KB4099467_WES7 ;Specify the description of KB Description= KB Description OS=WES7 Category=Other Packages [Script] 6 Create an RSP package using Wyse Device Manager
; Revision: 1.0 ; DATE: Date of the release ; Prepared and Written by : Engineer name ; This package can be pushed only on Wyse WES7 SP1 builds. ; Check Operating System (CO), SP level, and confirm free space (CF) CO "WES7" CF "C" "672768" ; Lockout (LU) LU ; Copy over new files ; Execute the below commands XC "<regroot>\qfe\*" "C:\QFE\*" SF "<regroot>\qfe\lookforerrorlog.ps1" "C:\windows\Setup\LookForErrorLog.ps1" ; Update QFE and End Lockout EX "C:\QFE\SetExecPolicyPS.bat" "+" ;Delay the execution (LP) EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\QFE\DumpStartTime.ps1" "+" EX "wusa.exe C:\QFE\windows6.1-kb4099467-x86.msu /quiet /norestart" "+" ; In the above command, edit windows6.1-kb4099467-x86.msu with Microsoft KB name along with.msu extension Create an RSP package using Wyse Device Manager 7
EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\windows\Setup\LookForErrorLog.ps1 -KBNumber KB4099467- InstallerType MSU" "+" ; In the above command edit the KB number to the desired KB which will be created DF "C:\windows\Setup\LookForErrorLog.ps1" EX "C:\QFE\Success.bat" "+" ;End lock out (EL) EL RB ; Delete the update File (DT) LU DT "C:\QFE" DT "c:\windows\softwaredistribution\download" EL ;Reboot the thin client (RB) RB RSP script structure for Windows Embedded Standard 7P [Version] ;Modify the KB number in the below format to the KB name which you are trying to create Number=KB4099950_WES7P ;Specify the description of KB Description= KB Description OS=WES7P Category=Other Packages 8 Create an RSP package using Wyse Device Manager
[Script] ;Revision: 1.0 ;DATE: Date of the release ;Prepared and Written by : Engineer Name ;This package can be pushed only on Wyse WES7P SP1 builds. ; Check Operating System (CO), SP level, and confirm free space (CF). CO "WES7P" CF "C" "161792" ; Lockout LU ; Copy over new files Execute the below commands XC "<regroot>\qfe\*" "C:\QFE\*" SF "<regroot>\qfe\lookforerrorlog.ps1" "C:\windows\Setup\LookForErrorLog.ps1" ; Update QFE and End Lockout EX "C:\QFE\SetExecPolicyPS.bat" "+" ;Delay the execution (LP) EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\QFE\DumpStartTime.ps1" "+" EX "wusa.exe C:\QFE\windows6.1-kb4099950-x64.msu /quiet /norestart" "+" ;In the above command Edit windows6.1-kb4099467-x86.msu with Microsoft KB name along with.msu extension Create an RSP package using Wyse Device Manager 9
EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\windows\Setup\LookForErrorLog.ps1 -KBNumber KB4099950-InstallerType MSU" "+" ; In the above command edit the KB number to the desired KB which will be created DF "C:\windows\Setup\LookForErrorLog.ps1" EX "C:\QFE\Success.bat" "+" ;End lock out (EL) EL RB ; Delete the update File LU DT "C:\QFE" DT "c:\windows\softwaredistribution\download" EL ;Reboot the thin client (RB) RB RSP script structure for Windows 10 IoT Enterprise LTSB build 1507 [Version] ;Modify the KB number to the desired KB which will be created Number=KBNumber ;Specify the description of KB Description=KB Description OS=WIE10 10 Create an RSP package using Wyse Device Manager
Category=Other Packages [Script] ;Revision:1.0 ;DATE: Date of the Package Created ;This package can be pushed only on Wyse WIE10 SP1 builds. ; Check Operating System (CO), SP level, and confirm free space (CF) CO "WIE10" CF "C" "64512" ; Lockout (LU) LU ; Copy over new files Execute the below commands XC "<regroot>\qfe\*" "C:\QFE\*" SF "<regroot>\qfe\lookforerrorlog.ps1" "C:\windows\Setup\LookForErrorLog.ps1" ; Update QFE & End Lockout EX "C:\QFE\SetExecPolicyPS.bat" "+" :Delay the execution (LP) EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\QFE\DumpStartTime.ps1" "+" EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\QFE\Execute.ps1" "+" Create an RSP package using Wyse Device Manager 11
EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\windows\Setup\LookForErrorLog.ps1 -KBNumber KB4091666- InstallerType MSU" "+" ;In the above line, edit the KB number. DF "C:\windows\Setup\LookForErrorLog.ps1" EX "C:\QFE\Success.bat" "+" ;End lock out (EL) EL RB ; Delete the update File LU DT "C:\QFE" DT "c:\windows\softwaredistribution\download" EL ;Reboot the thin client (RB) RB RSP script structure for Windows 10 IoT Enterprise LTSB build 1607 [Version] ;Modify the KB number in the below format to the KB name which you are trying to create Number=KBNumber_WIE10_1607 ;Specify the description of KB Description= KB Description OS=WIE10 12 Create an RSP package using Wyse Device Manager
Category=Other Packages [Script] ; Revision:1.0 ; DATE: Date of the release ;This package can be pushed only on Wyse WIE10 SP1 builds. ; Check Operating System (CO), SP level, and confirm free space (CF) CO "WIE10" CF "C" "4096" ; Lockout (LU) LU ; Copy over new files ;Execute the below commands XC "<regroot>\qfe\*" "C:\QFE\*" SF "<regroot>\qfe\lookforerrorlog.ps1" "C:\windows\Setup\LookForErrorLog.ps1" ; Update QFE and End Lockout EX "C:\QFE\SetExecPolicyPS.bat" "+" ; Delay the execution (LP) EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\QFE\DumpStartTime.ps1" "+" EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\QFE\Execute.ps1" "+" Create an RSP package using Wyse Device Manager 13
EX "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "C:\windows\Setup\LookForErrorLog.ps1 -KBNumber KB4093137- InstallerType MSU" "+" ; In the above command, edit windows6.1-kb4099467-x86.msu with Microsoft KB name along with.msu extension DF "C:\windows\Setup\LookForErrorLog.ps1" EX "C:\QFE\Success.bat" "+" ;End lock out (EL) EL RB ; Delete the updated file (DT) LU DT "C:\QFE" DT "c:\windows\softwaredistribution\download" EL ;Reboot the thin client (RB) RB 14 Create an RSP package using Wyse Device Manager
3 Register a package 1 Log in to the WDM console. 2 Go to Package Manager > Other Packages. 3 Right-click Other Packages, and click New > Package. The Package Wizard window is displayed. 4 Click the Register a package from Script file (.RSP ) radio button. 5 Click Next. 6 Browse the newly created RSP file, and click Open. 7 Click Next until the package registration success message is displayed. 8 Click Finish. Register a package 15
4 Deploy a package 1 Drag a registered package from Other Packages to Device Manager. The Device Manager window is displayed. 2 Select the devices that are registered in WDM for the respective operating system, and click Next. 3 Click Finish. 4 Go to Device Manager, right-click the devices which you want to update, and click Package Distribution Wizard. The Package Distribution Wizard window is displayed. 5 Select Other Packages, and click Next. 6 Select the QFE that must be deployed to the devices. 7 Click Next until the deployment success message is displayed. 8 Click Finish. 9 To verify the status of deployment, go to Update Manager > Schedule Packages. 16 Deploy a package