Running FBA on the Bootable CD-ROM Run-Time Image

To boot an El Torito run-time image on a hard disk, a CD-ROM with a copy of the run-time image is required. When you boot the run-time image, this CD-ROM is used to identify and mount the CD-ROM drive during the First Boot Agent (FBA) phase. Also during this phase, the Enhanced Write Filter (EWF) starts and creates the EWF Volume.

To run FBA and validate the status of EWF

  1. Verify that the pre-FBA El Torito CD-ROM is inserted into the device CD-ROM drive.
    Note   You can use any previously created El Torito CD-ROM to identify and mount the CD-ROM drive during the FBA phase provided the disk signature and partition sizes have not changed. During FBA, the system matches the disk signature specified in the El Torito component setting and the partition size of the run-time image. Unless you change the default value of either of these settings, you can use any previously created El Torito CD-ROM disks.
  2. Boot the run-time image located on the 650 MB hard disk partition.

    FBA automatically starts.

    The Eltorito.sys driver detects, reports, and sets up the new disk volume during the Plug and Play enumeration phase in FBA.

    With EWF, FBA usually reboots the system twice before it has completed its process and you can view the shell.

  3. After FBA completes, log on to the system and validate the status of EWF by using Ewfmgr.exe. The following list shows the steps to take to validate the status of EWF:
    1. Verify the status for EWF volume configuration by typing ewfmgr. For details, see EWF Volume Configuration. If EWF is configured correctly, Ewfmgr.exe displays the status of the EWF volume. The following example shows the status.
      Ewf Volume Configuration
      Volume Size            681574400
      Segments               8192
      Segment Size           249856
      Free segments          8192
      Max Levels             1
      Max Protected Volumes 1
      Protected Volumes      1
      Overlay volume percent full 0.00
      Protected volumes
      Arc Path "\Device\HarddiskVolume1"
    2. Verify the status for protected volume configuration by typing ewfmgr c:. For additional information about EWFMGR, see EWF Manager Commands. The EWF manager console application displays the status of the protected volume. The following example shows the status.
      Protected Volume Configuration
      Type            RAM
      State           DISABLED
      Boot Command    NO_CMD
        Param1        0
        Param2        0
      Persistent Data ""
      Volume ID       D2 02 96 49 00 0E 59 96 02 00 00 00 00 00 00 00
      Device Name     "\Device\HarddiskVolume1"
      Max Levels      1
      Clump Size      512
      Current Level   1
      Disk space used for data 0 bytes
      Disk space used for mapping 0 bytes
      Memory used for mapping 0 bytes

    If either of these commands displays an error message, verify that EWF is configured correctly. To troubleshoot, read the FBA log file, Fbalog.txt, in the FBA subdirectory. The FBA log should contain EWF information at the end of the file. An example of FBA log information is shown in the following example.

    ConfigureEwf() Start.
    Getting EWF config parameters from registry.
    EWF Partition Size = 0 (KBytes), Levels = 1, Volumes = 1.
    Protected Volume Config #0 :
      Disk= 0,Part= 1,DiskType= IDE,Type= RAM.
      Enable= Disabled, Optimize= 0, LazyWrite= N.
    Found 2 Hard Disks.
    Searching for El Torito disk.
    Disk0 signature = 0x499602D2.
    Disk1 signature = 0x4F544C45.
    Disk1 is an ElTorito disk.
    Disk #0 layeout info:
    PRIMARY partition,start=0x00000001966dfa00, len=0x0000000025429800, type= 6
    Created EWF partition on Disk = 1, partition = 1,size = 0x0000000000007e00 .
    Saving EWF configuration to registry:
    Protected Volume ArcName = multi(0)disk(0)rdisk(0)partition(1).
    EWF Volume Config on Disk#1, Partition#1:
      Segments = 0, Max Volumes = 1, Max Levels = 1
    Protected Volume Config on Disk0\Partition1 :
      Type = RAM, State= DISABLED.
    ConfigureEwf() End, status = 0x0.

    If the status in the configureEwf() End statement is not equal to zero, look for error messages in the EWF log section.

    For help resolving EWF problems, see Troubleshooting Enhanced Write Filter.

    For more information about Ewfmgr.exe, see EWF Manager Commands.

  4. In Logical Disk Manager, verify that your target system contains the El Torito CD-ROM and the original disk from which you booted your target system. If it does not, read the FBA log file and verify that the El Torito CD drive was listed in Plug and Play by searching for the "Eltorito\eltoritodiskdevice" string. If the El Torito CD drive is not listed, configure the Enhanced Write Filter component to include it, and then run FBA again.
  5. If EWF is functional and the El Torito CD drive has been listed in the FBA log file, you can customize the run-time image by adding additional applications and configurations.

See Also

Running ETPrep.exe | Enhanced Write Filter | EWF Manager Commands | First Boot Agent | How to Create a Bootable CD-ROM | Bootable CD-ROM

© 2006 Microsoft Corporation. All rights reserved.