How to Configure Image Prestaging
Note
Image pre-staging is useful only for the initial image download. It is not supported for image update.
To configure image prestaging
On the client computer, under the image store directory, create a folder for the prestaging image, and name it MED-V Images.
Note
This folder must be called MED-V Images.
Inside the MED-V Images folder, create a subfolder and name it PrestagedImages.
Note
This folder must be called PrestagedImages.
To apply Access Control Lists (ACL) security to the MED-V Images folder, set the following ACL:
NT AUTHORITY\\Authenticated Users:(OI)(CI)(special access:)
READ_CONTROL
SYNCHRONIZE
FILE_GENERIC_READ
FILE_READ_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_READ_ATTRIBUTES
NT AUTHORITY\SYSTEM:(OI)(CI)F
BUILTIN\Administrators:(OI)(CI)F
Note
It's recommended to apply ACL security to the MED-V Images folder.
To apply ACL security to the PrestagedImages folder, set the following ACL:
NT AUTHORITY\\Authenticated Users:(OI)(CI)(special access:)
READ_CONTROL
SYNCHRONIZE
FILE_GENERIC_READ
FILE_READ_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_READ_ATTRIBUTES
NT AUTHORITY\SYSTEM:(OI)(CI)F
BUILTIN\Administrators:(OI)(CI)F
Note
It's recommended to apply ACL security to the PrestagedImages folder.
Push the image files (CKM and INDEX files) to the PrestagedImages folder.
Note
After the image files have been pushed to the pre-stage folder, it is recommended to run a data integrity check and to mark the files as read-only.
Include the following parameter in the MED-V client installation:
Client.MSI VMSFOLDER="C:\MED-V Images"
.
How to update the prestage location
The registry key, PrestagedImagesPath, points to the default image location. It's located in the following directory:
On an x86 -
HKEY_LOCAL_MACHINE\SOFTWARE\Kidaro
On an x64 -
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432node
If the image is in a different location, change the path.