?? ??? ?????? IEEE 802.1X ???????? ???????? ?? 3.0 ?? ???? ??????? ?????? Windows (PE)

• ????? ???? ??????? 2007 ?????? ????? ???? ?????? ? Microsoft
• ?????? ????? ????? ? Microsoft

??????? ??????? ??????

????????? ???????

??????? ???????

??????? ??????? ??????? ??????

??????? ?????

????? ????????? ???????? ??? x86 ?? Windows PE 3.0

????? ????????? ???? ????? ??? x64 ?? Windows PE 3.0

???? ??? ?????? | ????? ???????

• ??????? ??? ???? ????? ??? Windows ???????? ????? ?????? ????? (AIK) ? Windows 7 ?????
• 394904_intl_i386_zip.exe ?? 394905_intl_x64_zip.exe? ???????? ??? ????? ???? Windows PE
• ???????? ????? ?????? VBS ????? XML. ?? ????? ?????? ???????? ???????????:
  • StartDot3.VBS
  • USERDATA EAP TLS.xml
  • ???????-WinPE-EAP-TLS.xml
• ??????? ????? ????? ??? ?????? ? RootCert.cer
• ?? ?????? ??????? ??????? ????????? ????? ? SubCACert.cer
• pfx "????? ????????" ?????? ??? ?????? ? Usercert.pfx
• ??????? x86 ?? x 64 ??????? certutil.exe ? certutil.exe.mui ?? ???? ??????? ????? ??? Windows 7? ???????? ??? ????? ???? Windows PE

1. ?? ??????? ?????? ???? ?????? ?????? ?? ??? ??????? ???????? ?? ??? ???Windows AIK? ???? ????? ?????????? ??????? ?????? ???????? ?? ???? ????? ?????? ??????.
   
   ????? ???????? ???? ???? ???? ??????? ????? ???????? ?????? ??????? ?????? ??????? ??? ???? ??????? ????????. ?????????? ??? ????? ???? ??????? ?? ?????? C:\Program Files\Windows AIK\Tools.
2. ?? ???? ???????? ?? ?????? ???????? ????? Copype.cmd. ????? ???????? ????? ?????????: ??????? ?????? ????? ??????.
   
   ??? ???? ??????? ????? copype.cmd?????>??????>? ????????> ???? x86? amd64? ?? ia64? ???????> ???? ?????? ??????.
   
   ??? ???? ??????? ?? ?????? ??? ?????:
   c:\winpe_x86 copype.cmd ??????? x86
   ???????? ????? ?????? ???? ?????? ?????? ??? ???? ???? ??????? ???????? ?????? ???:
   \winpe_x86
   \winpe_x86\ISO
   \winpe_x86\mount
3. ???? ?????? ???????? (Windows PE.wim) ??? ??????\Winpe_x86\ISO\sources? ?? ?? ?????? ????? ????? ??? boot.wim.

   copy c:\winpe_x86\winpe.wim c:\winpe_x86\ISO\sources\boot.wim

4. ?? ?????? ???? Windows PE ????????. ?? ??? ??????? ???? ?????? ?????? ???????? ??? ???? ???? ??? ????? ????? ?? ????? ?????.

   Dism /Mount-Wim /WimFile:C:\winpe_x86\ISO\sources\boot.wim /index:1 /MountDir:C:\winpe_x86\mount

5. ?? ?????? ????? ??????? ??????. ??? ?? ???? ?? ??? ?? ???? ????? ?? ??? ????? ???? ?? ??? ??? ?????? ?????.
   
   ?? ?????? ?????? WINPE WMI

   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wmi.cab"
   
   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\en-us\winpe-wmi_en-us.cab" 

   ????? ???? ??????? ?????? WINPE

   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-scripting.cab"
   
   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\en-us\winpe-scripting_en-us.cab" 

   ?? ?????? ?????? WINPE HTA

   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-hta.cab"
   
   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\en-us\winpe-hta_en-us.cab"

6. ?? ?????? ?????? WINPE WMI

   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wmi.cab"
   
   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\en-us\winpe-wmi_en-us.cab" 

   ????? ???? ??????? ?????? WINPE

   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-scripting.cab"
   
   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\en-us\winpe-scripting_en-us.cab" 

   ?? ?????? ?????? WINPE HTA

   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-hta.cab"
   
   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\en-us\winpe-hta_en-us.cab"

7. ?? ???????? ??????? ??????? 394904_intl_i386_zip.exe ??? ?????? c:\972831.
8. ?? ?????? ??????? 802.1 X ?????? ??? ??? ??????:

   dism.exe /image:C:\winpe_x86\mount /add-package /packagepath:"c:\972831\Windows6.1-KB972831-86.cab" 

9. ?? ?????? ???? ????? ??? ????? ?????? 802.1 X ?????? ??? ?????. ?????? ????? ?? ?????? ????? ??????:
   md C:\winpe_x86\mount\winpe
10. ?? ???? certutil.exe ? certutil.exe.mui ?? ???? ??????? ????? ??? Windows 7 ??? ?????? c:\winpe_x86\mount\winpe. ???? ?????? ??? ??? ??????? ?? ??????%windir%\system32.
    
    ????????? ?? ???? ???? ??????? ?????? ?? ??? ???????? ???????? ??? ??????? ???? Windows PE.
11. ?? ?????? ????? ???????? ??? ???????-WinPE-EAP-TLS.xml? ??? ?????? ????? ?????? ?????? "?????? ?????? ?????" ????? ???? ???????/??????? ?????? ?????? ??????:

    <TrustedRootCA>00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00</TrustedRootCA> 

12. ?? ???? ??? ????? ??????? ????? ?? ??? ???? Windows PE ???????? EAP-TLS:

    Copy Wired-WinPE-EAP-TLS.xml C:\winpe_x86\mount\winpe 

13. ?? ?????? ????? USERDATA EAP TLS.xml? ?????? ?????? ??????? ???? ???????? ? UserCert:

    <eapTls:Username>contoso\username</eapTls:Username>
    
    <eapTls:UserCert>00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00</eapTls:UserCert>

14. ?? ???? ??? ????? ??????? ????? ?? ??? ???? Windows PE ???????? EAP-TLS:

    copy USERDATA-EAP-TLS.xml C:\winpe_x86\mount\winpe 

15. ?? ???? ??????? ????? ????? ?? ???? ?????? ??????? ??????? ???????? ??? ?????? c:\winpe_x86\mount\winpe.
16. ?? ???? pfx "????? ????????" ?????? ?? ??? ?????? c:\winpe_x86\mount\winpe.
17. ?? ?????? ????? StartDot3.vbs? ?? ?? ?????? ????? ??????:

    certutil ?user ?p PASSWORD -importpfx \winpe\USERcert.pfx NOEXPORT,NOCHAIN 

    ???????? ??? ????? ??? ????? PASSWORD ??? ???? ?????? ???? ?? ??????? ??????? ??? ??? ?? ??????.
18. ?? ???? StartDot3.Vbs ??? ?????? c:\winpe_x86\mount\winpe.
19. ?? ?????? startnet.cmd ?????? StartDot3.vbs ????????:

    notepad C:\winpe_x86\mount\windows\system32\startnet.cmd

20. ?????.\winpe\StartDot3.vbs???wpeinit?????? ?? ?? ???? ????? startnet.cmd.
21. ?? ?????? ????? ?????? ??????? ???.WIM:

    Dism /Unmount-Wim /MountDir:C:\winpe_x86\mount /Commit

22. ?? ?????? ???? ????? ???? ??????? ???????? ??????? ??????? ?? ??? ??????? Windows 7 AIK ??? ???????? ???????:
    • "????? ??? ????? ???? ???????"
    • "????? UFD ???? ???????"

???? ???????? ?????

StartDot3.VBS

?================================
?StartDot3.VBS
?================================
Dim WshShell
Set WshShell = CreateObject("WScript.Shell")

commandLine = "certutil -addstore Root \winpe\Rootcert.cer"
Return  = WshShell.Run(commandLine, 0, true)

commandLine = "certutil -addstore CA \winpe\SubCAcert.cer"
Return  = WshShell.Run(commandLine, 0, true)

commandLine = "certutil ?user ?p PASSWORD -importpfx \winpe\USERcert.pfx NOEXPORT,NOCHAIN"
Return  = WshShell.Run(commandLine, 0, true)

commandLine = "net start dot3svc"
Return  = WshShell.Run(commandLine, 0, true)

commandLine = "netsh lan add profile filename=\winpe\Wired-WinPE-EAP-TLS.xml"
Return  = WshShell.Run(commandLine, 0, true)

commandLine = "netsh lan set eapuserdata filename=\winpe\Wired-WinPE-UserData-EAP-TLS.xml allusers=yes interface=*"
Return  = WshShell.Run(commandLine, 0, true)

USERDATA EAP TLS.xml

<?xml version="1.0"?>
<EapHostUserCredentials xmlns="http://www.microsoft.com/provisioning/EapHostUserCredentials" xmlns:eapCommon="http://www.microsoft.com/provisioning/EapCommon" xmlns:baseEap="http://www.microsoft.com/provisioning/BaseEapMethodUserCredentials">
 <EapMethod>
  <eapCommon:Type>13</eapCommon:Type>
  <eapCommon:AuthorId>0</eapCommon:AuthorId>
 </EapMethod>
 <Credentials xmlns:eapUser="http://www.microsoft.com/provisioning/EapUserPropertiesV1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:baseEap="http://www.microsoft.com/provisioning/BaseEapUserPropertiesV1" xmlns:eapTls="http://www.microsoft.com/provisioning/EapTlsUserPropertiesV1">
  <baseEap:Eap>
  <baseEap:Type>13</baseEap:Type>
   <eapTls:EapType>
    <eapTls:Username>contoso\username</eapTls:Username>
    <eapTls:UserCert>00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00</eapTls:UserCert>
   </eapTls:EapType>
  </baseEap:Eap>
 </Credentials>
</EapHostUserCredentials>

???????-WinPE-EAP-TLS.xml

<?xml version="1.0"?>
<LANProfile xmlns="http://www.microsoft.com/networking/LAN/profile/v1">
 <MSM>
  <security>
   <OneXEnforced>false</OneXEnforced>
   <OneXEnabled>true</OneXEnabled>
   <OneX xmlns="http://www.microsoft.com/networking/OneX/v1">
    <authMode>user</authMode>
    <EAPConfig><EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig"><EapMethod>
<Type xmlns="http://www.microsoft.com/provisioning/EapCommon">13</Type>
<VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId>
<VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType>
<AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</AuthorId>
</EapMethod>
<Config xmlns="http://www.microsoft.com/provisioning/EapHostConfig">
<Eap xmlns="http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"><Type>13</Type>
<EapType xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV1">
<CredentialsSource>
<CertificateStore>
<SimpleCertSelection>true</SimpleCertSelection>
</CertificateStore>
</CredentialsSource>
<ServerValidation>
<DisableUserPromptForServerValidation>false</DisableUserPromptForServerValidation>
<ServerNames></ServerNames>
<TrustedRootCA>00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00</TrustedRootCA>
</ServerValidation>
<DifferentUsername>false</DifferentUsername>
<PerformServerValidation xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">true</PerformServerValidation>
<AcceptServerName xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">false</AcceptServerName>
</EapType>
</Eap>
</Config>
</EapHostConfig>
</EAPConfig>
   </OneX>
  </security>
 </MSM>
</LANProfile>

???? ??? ?????? | ????? ???????