Lite Touch is a Windows deployment tool designed to require limited interaction during the deployment process. A technician logs in with their UVM NetID credentials, selects the OS version, additional software packages (if needed), and sets the local Administrator password. The remainder of the process is automated and includes joining the machine to the CAMPUS domain, installation of software, and the applying of various policy settings.
Requirements:
- Lite Touch installs volume licensed software and should only be used on machines purchased with UVM funds or UVM grant dollars.
- A wired UVM network connection with a valid 132.198.0.0/16 address.
- A USB to Ethernet adapter. The Lite Touch USB boot media will not necessarily have the drivers for all of the various onboard Network Interface Controllers, but will have the drivers for the following USB to Ethernet adapters:
- Lite Touch USB boot media (for UEFI systems)
- UEFI with Secure Boot should be enabled
- Legacy boot options should be disabled
- The machine should have a Trusted Platform Module (TPM chip), enabled and activated in BIOS.
- If imaging through Thunderbolt, you must enable Thunderbolt connections at boot in BIOS:
- System Configuration > Thunderbolt Adapter Configuration
- Enable Thunderbolt Technology Support = ON
- Enable Thunderbolt Adapter Pre-boot modules = ON
- Enable Thunderbolt Adapter Boot Support = ON
- System Configuration > Thunderbolt Adapter Configuration
Create a Lite Touch USB
A Lite Touch USB boot media is required to boot UEFI systems to the Lite Touch environment. To create a Lite Touch USB boot media, follow the steps below:
- Using a Windows machine, format the USB flash drive you’d like to use as FAT32.
- Navigate to the following folder on the Shared drive:
\\files.uvm.edu\Shared\Software\Deploy\LiteTouch
- Right-click on the “LiteTouch10_x64.iso” file, from the menu, select “Mount”. If you would rather install Windows 11, instead mount the file named “LiteTouch11_x64.iso”.
- Select all contents of the mounted ISO file and copy them to the root of your USB media.
- It’s important to regularly check the Date Modified on the Lite Touch ISO in the Deploy Shared Drive to make sure that your Lite Touch USB boot media is up to date!
Lite Touch deployment walkthrough
This guide assumes the machine that is being imaged supports a UEFI boot environment.
- Before proceeding check the following BIOS settings:
- Legacy boot options are disabled.
- UEFI and Secure Boot are enabled.
- The TPM chip is enabled and activated.
- SATA operation is set to AHCI (change from RAID, which is the default on Dell systems).
- Connect the machine to the wired UVM network using a USB to Ethernet adapter.
- Plug in your Lite Touch USB boot media, power on the machine, and tap the appropriate key on your system to bring up boot options (F12 on Dell systems)
- Select the UEFI USB boot option to boot to the Lite Touch USB boot media.
- If you’re not seeing the USB Lite Touch device, ensure you’ve followed the requirements in the Step 1, and that you have created your LT USB following these steps. If you still experience issues with the LT USB being detected as a valid boot device, update the machines BIOS and try again.
- When the Lite Touch environment loads, select the “Run the Deployment Wizard to install a new Operating System” option.
- Authenticate with your UVM NetID credentials.
- Select the Windows 10 Enterprise Deployment option, then click “Next”.
- By default, Lite Touch will use your credentials to join the machine to the CAMPUS domain. Click “Next” to continue.
- Select “Do not move user data and settings”, then click “Next”.
- Select “Do not restore user data and settings”, then click “Next”.
- Select any relevant applications to install, then click “Next”.
- Per UVM Information Security Policy, all hard drives on University owned laptops must be encrypted with Microsoft Bitlocker, which should be selected in the additional packages.
- Per UVM Information Security Policy, all hard drives on University owned laptops must be encrypted with Microsoft Bitlocker, which should be selected in the additional packages.
- Create a local administrator password. This should be a secure password (12 characters or more).
- Click “Begin” to start the imaging process.
- When Lite Touch kicks off the image process, you’ll see an installation progress window similar to the one below:
- Upon completion, the computer should restart, logon by itself, and show a completion dialog screen in White (Good), Yellow (OK), or Red (Bad, contact ETS)