AWS workspaces documentation change
Summary
Removed section about Windows rearm count requirements and added detailed instructions for disabling BitLocker encryption
Security assessment
The added BitLocker disable instructions document security-related encryption configuration but there's no evidence of addressing a specific vulnerability. The change provides operational guidance rather than patching a security issue.
Diff
diff --git a/workspaces/latest/adminguide/windows-images-common-errors.md b/workspaces/latest/adminguide/windows-images-common-errors.md index 63fa20ebb..ce295439d 100644 --- a//workspaces/latest/adminguide/windows-images-common-errors.md +++ b//workspaces/latest/adminguide/windows-images-common-errors.md @@ -114,13 +113,0 @@ A 64 bit OS image must be used. For more information, see [ Windows versions sup -The Image Rearm count must not be 0. The rearm feature allows you to extend the activation period for the trial version of Windows. The Create Image process requires that the rearm count be a value other than 0. - -###### To check the Windows rearm count - - 1. On the Windows Start menu, choose **Windows System** , then choose **Command Prompt**. - - 2. In the Command Prompt, enter `cscript C:\Windows\System32\slmgr.vbs /dlv`, and then press **Enter**. - - 3. To reset the rearm count to a value other than 0. For more information, see [Sysprep (Generalize) a Windows installation](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/sysprep--generalize--a-windows-installation?view=windows-11). - - - - @@ -159,0 +147,29 @@ Memory Integrity is not supported when Credential Guard is enabled on the Window +To Disable Bitlocker: + + 1. Open Powershell as an administrator. + + 2. Run the following command: + + manage-bde -off DriveLetter: + + 3. Check the status of BitLocker by running the below command: + + manage-bde -Status DriveLetter: + + 4. Ensure the values shown match these: + + * **BitLocker Version** – None + + * **Conversion Status** – Fully Decrypted + + * **Percentage Encrypted** – 0.0% + + * **Encryption Method** – None + + * **Protection Status** – Protection Off + + * **Lock Status** – Unlocked + + + +