AWS workspaces documentation change

Service: workspaces · 2026-05-28 · Documentation low

File: workspaces/latest/adminguide/byol-windows-images.md

Summary

Added requirements to disable BitLocker encryption before image import and clarified LTSC edition limitations

Security assessment

The changes address compatibility requirements for image imports but don't reference any security vulnerability. The BitLocker requirement prevents import failures but doesn't indicate a security flaw. LTSC note relates to technical limitations.

Diff

diff --git a/workspaces/latest/adminguide/byol-windows-images.md b/workspaces/latest/adminguide/byol-windows-images.md
index f3e90b94a..4837538b9 100644
--- a//workspaces/latest/adminguide/byol-windows-images.md
+++ b//workspaces/latest/adminguide/byol-windows-images.md
@@ -170,0 +171,4 @@ You will need a Windows virtual machine image or Windows ISO image file that use
+  * ###### Important
+
+Software-level disk encryption such as Microsoft BitLocker must be disabled on the source image before importing. Images with BitLocker or other full-disk encryption software enabled will fail the import process. Ensure BitLocker is turned off and the volume is fully decrypted before exporting your VM for import.
+
@@ -177,0 +182,4 @@ You will need a Windows virtual machine image or Windows ISO image file that use
+###### Important
+
+If you are using Windows 10 or Windows 11 LTSC (Long-Term Servicing Channel) editions, note that Amazon EC2 Image Builder does not support importing ISOs for LTSC editions. You must use an alternative method to create your base image, such as importing a VM image directly using the `aws ec2 import-image` AWS CLI command. For more information, see [ Supported operating systems for VM import](https://docs.aws.amazon.com/vm-import/latest/userguide/prerequisites.html) in the _VM Import/Export User Guide_.
+
@@ -228 +236 @@ Before you download and run the Image Compatibility Checker script, verify that
-Check that Windows VM is not enabled with BitLocker.
+Check that Windows VM is not enabled with BitLocker. For more information on this requirement, see the Prerequisites for using Windows BYOL with Amazon WorkSpaces section above.