AWS workspaces documentation change
Summary
Added Windows 11 Enterprise 24H2 support, BitLocker disablement requirements, and Windows 11 24H2 import method restrictions
Security assessment
Added explicit instructions to disable BitLocker encryption (a security feature) before image conversion. While this relates to security configuration, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/workspaces/latest/adminguide/byol-windows-images.md b/workspaces/latest/adminguide/byol-windows-images.md index bd910f95e..f90fb1fd2 100644 --- a//workspaces/latest/adminguide/byol-windows-images.md +++ b//workspaces/latest/adminguide/byol-windows-images.md @@ -94,0 +95,2 @@ Your VM must run one of the following Windows versions: + * Windows 11 Enterprise 24H2 (October 2024 release) + @@ -149,0 +152,31 @@ Before you download and run the Image Compatibility Checker script, verify that +Check that Windows VM is not enabled with BitLocker. + +###### Ensure Windows VM is not enabled with BitLocker + + 1. Open Powershell as an administrator. + + 2. Run the following command: + + manage-bde -off DriveLetter: + + 3. Check the status of BitLocker by running this command: + + manage-bde -Status DriveLetter: + + 4. Ensure the values shown match these: + + * **BitLocker Version** – None + + * **Conversion Status** – Fully Decrypted + + * **Percentage Encrypted** – 0.0% + + * **Encryption Method** – None + + * **Protection Status** – Protection Off + + * **Lock Status** – Unlocked + + + + @@ -208,0 +242,6 @@ The most common reason for a Sysprep failure is that the Modern AppX Packages ha +###### Note + +Import of Windows 11 24H2 images is not supported via the WorkSpaces console or the new `import-custom-workspace-image` API. + +To import Windows 11 24H2 images, you must use the `import-workspace-image` API command. For more information, see [import-workspace-image](https://docs.aws.amazon.com/cli/latest/reference/workspaces/import-workspace-image.html) in the _AWS CLI Command Reference_. +