Army Golden Master (AGM) Microsoft Products

Transcription

UNCLASSIFIEDArmy Golden Master (AGM)Microsoft ProductsInformation Exchange ForumSession: 1Army Golden Master ProgramTina HernandezNETCOM 9th SC (A) G5 PP&AUNCLASSIFIED

UNCLASSIFIED Program Overview / ObjectivesUGM BaselineUGM-Army ConfigurationsProduct familiesRelease / DeploymentDemonstrationQuestions2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED2

UNCLASSIFIEDAuthoritativesourcefor Army defined standardAGMProgramFunctionsconfigurations for the office productivity computingenvironment within the Army Enterprise Infrastructure.Federal SecurityGovernanceDOD ConsensusWorking group DISA NSA USGCB Branch Services Govt. Agencies Industry Partners Joint Consensusconfigurationbaseline securitysettings Security TemplateImplementationGuidance (STIG)UGM-Army Is based on DODConsensus workinggroup settings Includesfunctionalitysettings required bythe Army2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsEnterprise LicenseAgreement Token basedactivation Issuance license Software assuranceAccreditationDeployment CoN - certificate ofNetworthiness DIACAP ACA Scorecard IATT IATO ATO UGM-Army builds DVD’s SYSMAN Distribution PD CHESS CB Program SOFTMART DownloadIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED3

UNCLASSIFIEDCIO G/6 Memo 15 AUGUST 2006 SUBJECT: ARMY ESTABLISHESARMY GOLDEN MASTER (AGM) AS THE STANDARDSOURCE FOR COMMON OPERATING SYSTEMBASELINE CONFIGURATIONSALARACT 199-2008 August 2008 XP Guidance and Migration Timeline (EOL Dec 09) Vista Guidance and Migration TimelineHQDA EXORD 05609 Annex F January 2009 Required Vista Migration by 31 Dec 2009 (Waiver process) Restricted Vista roll back to XPARMYCYBERCOMMANDEXORD 056-09 May 2011 Required Windows 7 Migration by 30 June 2013 (Waiverprocess) Restricted roll back to XP Requires DAR solution2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED4

UNCLASSIFIEDDOD UGM ConfigurationDISA, NSA, MILDEPs(Army, Air Force, Navy, Marine Corps, Coast 8-23 (1045-1200) // Army Golden Master for Microsoft ProductsUSGCB BaselinesVendor Security GuidesFederal PolicyIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED5

UNCLASSIFIEDNSA/DISA/USGCBArmy ConfigurationEnterprise ApplicationsHW DriversRequires ApplicationsSecurity ModificationsType Accreditation (ATO) and Enterprise Certificate of Networthiness (CON) obtainedthrough services and or reciprocity.2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED6

Operating System(x86)Operating -Army ComponentsUNCLASSIFIED2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsConfiguration Baseline ObjectsStandalone Deployments (DVD)WDS/MDT DeploymentsSCCM IntegrationEnable 3rd Party DeploymentsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED7

UNCLASSIFIED Full Baseline Three digit versioning allows forminor updates withoutreaccreditation (“10.0.0”)Version is only updated whenthere is a security change or thevendor releases a major ServicePack Monthly updates No version changesCumulative HotfixesUpdated application libraryUpdated Utilities/Documentation2011-08-23 (1045-1200) // Army Golden Master for Microsoft edapplicationsMSHotfixes/IAVMFull AGMLibrarypublishedIAVMCompliance(release date)OS image(wim)IEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED8

UNCLASSIFIEDAGM9 Family Windows Vista SP2 Windows Server 2008 SP2UGM-Army10 Family Windows 7 Enterprise(AGM)x86 & x64 Windows Server 2008 R2 Windows Server 2003 SP2x64 only Mac OS X Snow Leopard Mac OS X Leopard2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED9

UNCLASSIFIEDSOFTMART Hosts AGM\ELA mediaSoftMart\CHESSCHESS Maintains Installation List Maintains POC listNEC\PM Points ofContactNEC\NEC equivalent Approves ELA license requests Download media Receives physical shipmentsTrusted AgentTrusted Agent Download mediaFor assistance accessing media:CHESS@conus.army.mil2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsLocal Distributionof AGM or MS-ELA2mediaIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED10

UNCLASSIFIED Deployment Training Two sessions were held (January and April 2011) for 60students Training session aligns to supported deployment methodology Manual install (DVD) Custom images Deployment (WDS & SCCM) Information/Class content is available on the AGM AKO site Windows 7 EXORD defines process to coordinate local ororganizational training sessions Organizations interested in hosting AGM Windows 7deployment training should contact AGM Capability Manager,NETCOM 9th SC(A) G5 at agm.support@us.army.mil2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED11

UNCLASSIFIED What is the timeline to migrate to Windows 7? AGM Windows 7 EXORD Do I need to have AGM approval for security changes? Waiver Process I have heard that XP MODE turns Windows 7 back into XP. Is this true? XP Mode: Separate VM, treat as discrete physical platform, not included inAGM approval. Can I use Bitlocker and EFS in Windows 7 to comply with Data at Rest (DAR)policy? Yes When will the AGM Program support Office 2010? Based upon ELA What Activation Options are supported by the AGM Program? TBA (Default) (Alternate SIPR TBA is available by request) KMS can be requested if supported by organizational environment.2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED12

UNCLASSIFIED Activation through RDP and WMI VM demos with 2 platforms SIPR Activation Discuss and show slmgr.vbs outputs Administrative features (what’s new) inWin7/R2 Cached login discussion Show cache login demo using a smart card2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED13

UNCLASSIFIEDAGM ProgramManagement Tina Hernandez 520-538-3648 Lead Ken Beall/NCI (Contractor) Ken.p.beall.ctr@mail.milAGM Help Desk agm.support@us.army.mil Comm: 800-966-7176AGM Home Page(AKO Login required) 3 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED14

UNCLASSIFIED2011-08-23 (1045-1200) // Army Golden Master for Microsoft ProductsIEF Session: 1 Track: NETCOM/9th SC(A)UNCLASSIFIED15

Windows Vista SP2 Windows Server 2008 SP2 Windows Server 2003 SP2 Mac OS X Leopard Windows 7 Enterprise (AGM) Windows Server 2008 R2 Mac OS X Snow Leopard x86 & x64 UGM-Army 10 Family x64 only AGM 9 Family 2011-08-23 (1045-1200) // Army Golden Master for