advantech software master

Advantech Software MasterWindows Embedded Standard

Training 2

Tung Yi

Agenda

• EEF (EWF, HORM, FBWF )

• Advantech WES Add-ons

• How to build a MUI image

WES2009 — Enhanced Write Filter (EWF)

• Enhanced Write Filter – Makes Windows XP,

Embedded

– Allows booting from read-only media

– Protects operating system partition

– Not necessary to redesign applications

• EWFMGR.exe

– Console application that provides a command-line

interface for managing EWF

• EWF API allows control of EWF

– Enable/Disable EWF Protection

– Commit Changes

WES2009 — EWF Concept & Overlays

Overlay

Original Disk

1) Read Data from the Disk

2) Write Data back to the disk

3) Read Data again

Application that

is accessing

EWF protected

volume

WES2009 — EWF Overlay Option

• EWF can be configured by applying to multiple volumes, each of which may have Disk or RAM overlays.

• Disk Overlay – Using EWF Volume

EWF Master Volume Table, Overlay stack and Overlay data are stored in the EWF volume

After reboot information retained

• RAM or RAMREG Overlay– Enables stateless operation – After reboot all changes lost

– Run without any read/write storage

WES2009 — EWF Overlays

RAM Overlay

Disk Overlay

RAM-REGOverlay

C:\< 32 MB

EWF Volume

Partition 1

Protected Volume

Partition 2

EWF Partition

Disk

C:\64 KB

EWF Volume

Partition 1 Partition 2Disk

ProtectedVolume

EWF Partition

EWF Overlay

RAM

C:\

Disk RAM

Registry EWF Overlay

Partition 1

ProtectedVolume

EWF volume infostored in registry

EWF Disk

Overlay

WES2009 — EWFHibernate Once Resume Many (HORM)

• EWF feature in WES2009

• Benefits

– Quicker boot time

– Booting with specific applications and services running

• Limitation

– All of the partitions on your system must be protected by

EWF.

– You need to control disk driver if you want to create

unprotected volume in HORM.

WES2009 — EWF Settings

WES2009 — EWF Components

• EWF.sys

– Driver which redirects IO requests

• EWFDLL.DLL

– Used by FBA to format a EWF Partition

• EWFNTLDR

– Modified NTLDR (NT Loader)

• EWFMgr.exe

– Management Console Application

• EWFAPI.dll

– EWF API support library

– EWFAPI.H and EWFAPI.LIB

WES2009 — EWF APIs

• EWFMGR.EXE – command line program built with

the EWF APIs that controls EWF

• EWF APIs allow you to build in EWF control within

your applications

– Supports Visual C++ application development (EWFAPI.dll)

– .NET support is possible

– MSDN: Controlling EWF by Using the EWF APIs

WES2009 – File Based Write Filter (FBWF)

• FBWF protects a volume on a file level instead of the whole volume or partition. The developer can set specific files or directories to be unprotected.– Any writes made to protected

files are sent to RAM overlay.

– Any writes to unprotected files are passed through to the disk.

• Features:– File and Directory Management

Transparency

– Selective Write Through

– Selective Commits and Restores

– Improved Overlay Memory Use

FBWFMGR Application

Volume manger

NTFS / FAT32

FBWF

Disk Driver

Volatile Write

Cache (RAM)

Read/Write

Storage

User Mode

Kernel Mode

Read/Write

Through

OperationsRead Only

Operation for

Protected Files

Read/Write

Operation for

Protected Files

WES2009 – File Based Write Filter (FBWF)

• EWF and FBWF can exist in the same image, but cannot control the same volume

• Some limitations with NTFS – File ID, compression, and encryption

• Registry Filter still recommended for domain secret keys and TSCAL registry key support

• FBWFMGR and FBWF API are available to control the state of FBWF

WES2009 – FBWF Concept #1

Overlay

Original Disk

1) Read Data from the Disk

2) File is protected so Data is

written back to the overlay

3) Read Data again

Application that

is accessing

FBWF protected

volume

WES2009 – FBWF Concept #2

Overlay

Original Disk

1) Read Data from the Disk

2) File is unprotected thus is

written back to the drive

3) Read Data again

Application that

is accessing

FBWF protected

volume

WES2009 – FBWF Settings

• FBWF Configuration– Specify the number of

protected volumes

– Start FBWF –enabled/disabled

– Set the amount of memory to use

– Set the cache type

– Enable/disable specific OS features

• Protected Volume Settings– Specify the drive letter

– List the unprotected files

Advantech XPe Add-ons

Advantech WES Add-ons

• Advantech EWF Manager

• Advantech FBWF Manager

• Advantech Booting Manager

Advantech EWF Manager

Advantech FBWF Manager

Advantech FBWF Manager

Advantech FBWF Manager

Advantech Booting Manager

Support List Editor

Support List Editor

BootingManager.exe

EWFManager.exe

FBWFManager.exe

BootingManager.dat

EWFManager.dat

FBWFManager.dat

Encrypted Support List

Support List Editor

Demo

Advantech XPe Add-ons

How to build a MUI image – Component browser

Component browser

Path:

Software

System

International

Infrastructure

How to build a MUI image – Settings

Lab 2

Build MUI Platform