With the General Availability (GA) of PowerShell 7, it is time to think about updating our MDT Reference Images. Furthermore the increasing number of remote backends that require a minimum TLS 1.2 for remote connections with for example Invoke-WebRequest like PowerShell Gallery and several other JSON APIs.
Important! Evergreen uses Nuget which now requires TLS12. Add this to your Ref Images #automation Thx @xenadmin
"Powershell.exe Set-ItemProperty -Path 'HKLM:SOFTWAREMicrosoft.NetFrameworkv4.0.30319' -Name 'SchUseStrongCrypto' -Value '1' -Type DWord"
— Trond E Haavarstein (@xenappblog) April 19, 2020
Please ensure you uncomment the .NET command (line 39), if you haven’t enabled TLS 1.2 in your Reference Image, yet.
The results will look like this:
Please find the most up to date code in my GitHub repository.
Below is the code also embedded for further reference.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 |
<# .SYNOPSIS Evergreen Download & Setup Script for PowerShell Core Windows x64 MSI .DESCRIPTION Evergreen Download & Setup Script for PowerShell Core Windows x64 MSI Created by Marco Hofmann in 2020 Blog: https://www.meinekleinefarm.net/ Twitter: @xenadmin .EXAMPLE Start from inside the working directory, to preserve the Version history structure: PS C:\MDTBuildLab\Applications\Microsoft\PowerShell> .\Install_x86.ps1 .OUTPUTS Will generate a log file in C:\Windows\Temp Will generate an MSI archive in the Working directory with past versions. .NOTES GitHub JSON API requires TLS 1.2 for Invoke-WebRequest. Ensure you uncomment the .NET command (line 39), if you haven't enabled TLS 1.2 in your Reference Image, yet. .NOTES PowerShell Wrapper for MDT, Standalone and Chocolatey Installation - (C)2015 xenappblog.com Example 1: Start-Process "XenDesktopServerSetup.exe" -ArgumentList $unattendedArgs -Wait -Passthru Example 2 Powershell: Start-Process powershell.exe -ExecutionPolicy bypass -file $Destination Example 3 EXE (Always use ' '): $UnattendedArgs='/qn' (Start-Process "$PackageName.$InstallerType" $UnattendedArgs -Wait -Passthru).ExitCode Example 4 MSI (Always use " "): $UnattendedArgs = "/i $PackageName.$InstallerType ALLUSERS=1 /qn /liewa $LogApp" (Start-Process msiexec.exe -ArgumentList $UnattendedArgs -Wait -Passthru).ExitCode .LINK https://www.meinekleinefarm.net/download-and-install-latest-release-of-powershell/ .LINK https://github.com/xenadmin/applications/tree/master/Microsoft/PowerShell/ #> Clear-Host Write-Verbose "Setting Arguments" -Verbose $StartDTM = (Get-Date) # Ensures that Invoke-WebRequest uses TLS 1.2 - UNCOMMENT if you haven't enabled TLS1.2 in your reference image and are using PowerShell < 7.0 # [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 $arch = "x64" $github = Invoke-WebRequest 'https://api.github.com/repos/PowerShell/PowerShell/releases/latest' -UseBasicParsing | ConvertFrom-Json $url = $($github.assets | Where-Object -Property name -Like "*win-$arch.msi").browser_download_url $Vendor = "Microsoft" $Product = "PowerShell" $Version = $($github.tag_name).Trim("v") $PackageName = "PowerShell-$Version-win-$arch" $InstallerType = "msi" $Source = "$PackageName" + "." + "$InstallerType" $LogPS = "${env:SystemRoot}" + "\Temp\$Vendor $Product $Version PS Wrapper.log" $LogApp = "${env:SystemRoot}" + "\Temp\$PackageName.log" $Destination = "${env:programfiles}" + "\$Product\" $UnattendedArgs = "/i $PackageName.$InstallerType ALLUSERS=1 /qn /liewa $LogApp" Start-Transcript $LogPS if ( -Not (Test-Path -Path "$Version-$arch" ) ) { New-Item -ItemType directory -Path "$Version-$arch" } Set-Location "$Version-$arch" Write-Verbose "Downloading $Vendor $Product $Version $arch" -Verbose If (!(Test-Path -Path $Source)) { Invoke-WebRequest -Uri $url -OutFile $Source -UseBasicParsing } Else { Write-Verbose "File exists. Skipping Download." -Verbose } Write-Verbose "Starting Installation of $Vendor $Product $Version $arch" -Verbose (Start-Process msiexec.exe -ArgumentList $UnattendedArgs -Wait -Passthru).ExitCode Write-Verbose "Customization" -Verbose Write-Verbose "Stop logging" -Verbose $EndDTM = (Get-Date) Write-Verbose "Elapsed Time: $(($EndDTM-$StartDTM).TotalSeconds) Seconds" -Verbose Write-Verbose "Elapsed Time: $(($EndDTM-$StartDTM).TotalMinutes) Minutes" -Verbose Stop-Transcript |
If you do have any questions or comments about this, please put them below. Thank you.
