当前位置：文江博客知识库 citrix en-us citrix-app-layering 4 layer prepare-os-for-layering prepare-os-citrix-hypervisor-hyperv-vsphere

Prepare your OS image for layering in Citrix Hypervisor, Hyper-V, or vSphere 编辑

September 23, 2022 Contributed by: C L

Before you start, ensure that you meet the requirements
. While preparing the image, you can Expedite a Microsoft Ngen.exe operation, if necessary
, if you think it is taking too long.

If using Windows 10, you can speed up desktop start times as long as you are not running Citrix Provisioning, machine creation, or VMware View. In this situation, you can remove Windows 10 built-in applications
. We recommend removing the apps on a new version of the OS layer, rather than in the OS image itself.

Note:
Citrix Hypervisor does not support UEFI-based machines.

Install the OS on a virtual machine

It is crucial to start with an OS freshly installed from ISO, preferably from your hypervisor.

In this procedure, be sure to follow steps and notes specific to the Windows version you are installing.

Log into your hypervisor client.
Create a virtual machine with the correct CPU, RAM, hard drive, and network settings for your operating system type. Guidance:
- Citrix Hypervisor virtual machine: Ensure that only one network is selected.
- vSphere virtual machine:
  - Network: (Required) Select the VMXNET 3 network adapter.
  Important:
  You can have one, and only one, network device, and the E1000 NIC must never have been used. The default E1000 adapter (or even a ghost NIC leftover from an E1000 adapter) can cause customization timeout errors on the virtual machines.
  - Thin Provision: Select Thin Provision.
- All hypervisors:
  - Hard drive: Ensure that the appliance can access the hard drive that you create.
Attach the ISO and install the operating system. This machine must not be joined to the domain. Domain join must be done in the Platform layer, and any domain group membership changes must be done through Group Policy.
Install the hypervisor tools for the platform where you plan to package layers. If you support multiple hypervisors, put the tools for the hypervisor you plan to use for publishing images in the Platform layer.
- For Hyper-V: Use the Microsoft Windows Integration Services Setup Disk to install Hyper-V Integration Services.

If using a Server OS, install the Remote Desktop Session Host feature

When using a Windows Server, you need to install the Remote Desktop Session Host feature. When the Remote Desktop Session Host role is installed in the OS layer, it is updated as part of Windows. You can install the role on the platform layer with the VDA instead, if you prefer.

If you install RDS in the OS layer, you need to use local GPOs to define the RDS license servers. Otherwise over time you will lose the ability to log on to packaging machines.

To install the Session Host feature:

In the Server Manager, select Add roles and features.
For the Installation Type, select Role-based or Feature-based installation.
For the Server role, select Remote Desktop Services > Remote Desktop Session Host (Installed). This installs the C++ library and the RDS role.
Complete the process of adding the Server Roles.

Ensure the correct versions of .Net Framework are installed (Windows 7, Windows 10, Windows Server 2016)

The .Net Framework is a software framework provided by Microsoft, and it is required for many third party applications to run.

/.NET Framework 4.5: Required on Windows 7.
/.NET Framework 3.5: Required on Windows 10 and Windows Server 2016.

To install .NET Framework:

On the Start menu, select Control Panel > Programs and Features.
In the left panel select Turn Windows features on or off. A window opens.
Select the correct version of .NET Framework, click OK, and wait for the installation to complete.
Important:
Even if .NET is already installed, continue with the rest of these steps.
Exit the Control Panel.
In Notifications in the right-side of your taskbar, click All Settings, and open the Windows 10 Settings app.
Select Settings > Update & Security.
Check for updates, and install all updates available.
Exit Settings.

Install Windows updates

Be sure to install all Windows updates.

Install all important updates.
Check for updates again after the virtual machine is rebooted. Some updates became available only after others are installed.
Install all required service packs:
- If using Windows 2008 with Citrix Provisioning or Horizon View, install Windows Server 2008 R2 Service Pack 1 (SP1).
  Note:
  If KB3125574 is installed, uninstall it before installing this service pack.
Clear Windows Automatic Updates and disable Windows System Restore using the local group policy editor, gpedit.msc. The system handles restore points for you. Layer versions allow you to specify when updates occur.
Windows 10: Clear Hibernation by entering this command:
```
powercfg.exe /hibernate off
```
Enable the built-in administrator and select Password never expires.
If using Key Management Service (KMS) licensing, run a command window as Administrator, and enter these commands:
```
slmgr /skms <kmsserverhost>slmgr /rearmrebootslmgr /ipk XXXX-YOUR-KMS-KEY-XXXXslmgr /ato
```

If using a server OS, run the following commands in PowerShell:

Set-ExecutionPolicy UnrestrictedEnable-PSRemoting<!--NeedCopy-->

Expedite a Microsoft Ngen.exe operation, if necessary

Once all software updates have been installed, you must allow Ngen.exe to essentially recompile .NET byte code into native images and construct the registry entries to manage them.

Ngen.exe is the Microsoft Native Image Generator, which is part of the .NET system. Windows determines when to run Ngen.exe based on what software is being installed and what Windows detects in the configuration.

Important:
When Ngen.exe is running, you must let it complete. An interrupted Ngen.exe operation can leave you with non-functioning .NET assemblies or other problems in the .NET system.

Normally, Ngen.exe is a background operation that pauses when there is foreground activity. If you want to expedite an Ngen.exe operation, you can bring the task into the foreground to complete it as quickly as possible.

To bring the task into the foreground:

Open a command prompt as Administrator.
Go to the Microsoft.NET\Framework directory for the version currently in use:
```
cd C:\Windows\Microsoft.NET\FrameworkNN\vX.X.XXXXX
```
Enter the following Ngen.exe command to run all queued items. This command processes queued component installs before building assemblies.
```
ngen eqi 3
```
Note:
This variation of the ngen command has been tested and is the variation that works in this situation in App Layering.
The Ngen.exe task moves to the foreground in the command prompt, and lists the assemblies being compiled. It is OK if you see compilation messages.
You can use the Task Manager to see if an instance of MSCORSVW.EXE is running. If it is, allow it to complete, or run ngen eqi 3.
Warning:
Do not reboot to stop the task. Allow the task to complete!
Ensure that all Ngen.exe processes have run to completion.

Run the App Layering OS Machine Tools on the image

To prepare the OS image to run in a layer, you run the OS Machine Tools file on the image. This executable runs a GPO setup script (gposetup.cmd), and a script to set the Key Management Service (KMS) version. The script is called SetKMSVersion.hta.

Download the following zip file onto the OS image:App_Layering_Citrix_App_Layering_OS_Machine_Tools_20.x.zip
Extract the files to:
```
c:\windows\setup\scripts
```
Note:
The file must be extracted to the directory. Do not change the directory.

If using KMS, configure license activation

Once the Key Management Service (KMS) scripts are extracted, the SetKMSVersion utility asks you to choose whether to use KMS licensing.

Note:
Publishing images into environments where both KMS and Active Directory-based activation (ADBA) are being used at the same time causes problems with activation.