UEFI-based Windows Imaging

By bowells

UEFI-based computers being imaged with a Windows OS can now PXE boot via UEFI instead of a legacy boot protocol.

IPAM setting

When adding or editing a record in Infoblox, assign it to the IPv4 Filter, PXE-WolfTechAD-UEFI-Option.

Active Directory

In the AD object for the computer, under the Attribute Editor, set the netbootGUID to the computer’s MAC address. Note that twenty 0’s will need to be added before the MAC address. Ex: 000000000000000000001234567890AB

Firmware settings

It may be necessary to make a few changes to the computer’s firmware in order to successfully network boot. Computers purchased from the NCSU MarketPlace are either from Dell or Lenovo so we will only list the settings for those manufacturers here.

Also, note that Windows 7 does not support Secure Boot. If you are installing Windows 7, regardless of the computer’s manufacturer, Secure Boot must be disabled in the firmware.

Dell
  • System Configuration
    • Integrated NIC
      • Enable UEFI Network Stack checkbox checked.
      • Enabled w/ PXE radio button selected.
    • SATA Operation
      • AHCI radio button should be selected unless specifically configuring a RAID array
  • Security
    • Set admin password to what’s in LastPass
  • Secure Boot
    • Disable secure boot.
Lenovo
  1. Boot up the computer.
  2. Press F2 -> press Enter -> press F1.
  3. This should take you to the BIOS screen. Select Security -> select Secure Boot -> set to Disable -> select Start Up -> select UEFI/Legacy Boot -> set to Legacy Only -> press F10.
  4. Once you press F10, reboot then press F12.
  5. You should now be at the boot menu. Select PCI LAN.
  6. Press Enter.
  7. This should bring up a screen with the Intel Network Boot Agent. Simultaneously press Function and P (on some Lenovo ThinkPad models, this will be the same as pressing Pause|Break).
  8. Press Enter.
  9. This should go to failure, then go to the boot menu.

Published in .