Installation Type Empirum Preinstallation Environment
If you select the installation type Empirum PE, besides the dialogs described in the Section General Properties, you will additionally have the following settings possibilities:
- In the navigation bar switch to Configuration > OS Installer > Bootdisk > Disk Configuration.
- Select the Installation type Empirum PE.
You can select various EPE versions from the "Installation Type" list to bind them to a specific EPE image by selecting them under "Installation Type". By default, you should use "Empirum PE2 Latest Version“ to ensure that the latest existing sources are used. This is the only way to recreate various EPE images via Tools -> EPE boot images update all at once, provided that they have been downloaded via the driver administration.
- Optionally, make the following settings:
- Language
Select the language in which the Empirum Preinstallation Environment is displayed.
- Monitoring
If you activate this function, you can monitor the installation status within the Empirum Preinstallation Environment via a browser window. The link to the status web page is written in the PXE log of the client at the beginning of the installation.
- Kernel parameters
Here you can assign additional parameters to the Empirum PE Kernel.
The modification of the Kernel parameters is at your own risk. Faulty configuration can impede on the functioning of the Empirum Preinstallation Enviroment.
EPE uses as default parameter NTLM
The use of the encoding method depends on the domain controller and is chosen by the administrator.
Accordingly the EPE image in the kernel parametern must be extended with the parameter EPE_SEC=. The possible values for EPE_SEC= are:
- Default Value = NTLM
Use NTLM password hashing
- NTLMV2I
Use NTLMV2I password hashing with packet signing
- NTLMV2
Use NTLMV2 password hashing
- NTLMI
Use NTLMI password hashing with signing
If the highest security is used by the domain controller, it is urgent to use NTLMV2I as kernel parameter. Otherwise a connection can not come into effect:
Microsoft network client: Digitally sign communications (if server agrees) =activated
Microsoft network client: Digitally sign communications (always) =activated
Microsoft-network server: Digitally sign communications (if client agrees) =activated
Microsoft-network server: Digitally sign communications (always) =activated
Network security: Send NTLMv2 response only\Deny LM & NTLM
- Info Level
The Info Level configures the output of the status messages in the Empirum Preinstallation Environment on the client.
- Debug Level
The Debug Level configures the output of the status messages via the PXE log.
This means: None = Level 0; Standard = Level 3; Advanced = Level 7 and Completely = Level 10.
From level 3 SKUs and other security-related information are displayed in plain text. This can limit errors in these areas. If log files are requested from this level by Matrix42 support, you may decide to leave that information in it or delete it. From Empirum v14 SP1 passwords are no longer displayed in plain text if they are at least six characters long!
- Enter the network, respectively the server data for your environment in the tab Diskette Configuration > Client Settings. (see Client Properties).
- Click on Create PXE Image, to create a network boot medium. Enter a name for the diskette configuration and click on Save in the Save Configuration dialog.
- Click on Create Boot CD (ISO), enter the Directory, in which the finalized ISO image is to be saved. After the creation, you can burn it on a CD medium.