HP mt40 Administrator Reference Guide - Page 15

Enhanced Write Filter, Using the Enhanced Write Filter command line utility - software

Page 15 highlights

The FBWF Status icon displays the following states: ● Red lock: FBWF is disabled. ● Green lock: FBWF is enabled. ● Yellow lock: FBWF state will change on next boot. If you are logged on as an administrator, you can change the status of FBWF by right-clicking the icon and selecting the desired FBWF state. NOTE: Because the fbwfmgr.exe utility and the FBWF status service execute separate code, status changes made by fbwfmgr.exe are not automatically reflected by the FBWF status icon. If you use the command line to modify the FBWF, right-click the icon to refresh the status icon display (click anywhere on the screen to close the context menu). The status icon display is refreshed automatically when you make modifications through the FBWF Control Panel utility. The FBWF utility always reflects the current status. Enhanced Write Filter The Enhanced Write Filter (EWF) provides a secure environment for your computer by protecting it from undesired flash memory writes (the operating system and functional software components reside in flash memory). The write filter also extends the life of the computer by preventing excessive flash write activity. Instead of allowing writes directly to the flash memory, it intercepts all flash writes and caches them. To save changes to system configuration settings, you must disable the write filter cache or perform the -commit command during the current boot session. Otherwise, the new settings will be lost when the computer is shut down or restarted. If you do not want to make permanent changes, you can enable the write filter. The write filter cache contents are not lost when you log off and on again (as the same or different user). You can disable the write filter cache after the new logon and still retain the changes. After you disable the write filter, all future writes during the current boot session are written to the flash with no further caching until the computer is restarted. You can also enable/disable the write filter by using the command line. NOTE: Only an account with administrator privileges can enable, disable, or commit the enhanced write filter. NOTE: Always enable the write filter after you have made all of your permanent changes. Using the Enhanced Write Filter command line utility CAUTION: When using the -commit command, all of the temporary contents are permanently written to the flash memory. NOTE: Because the Enhanced Write Filter commands are executed on the next boot, you must restart the computer for the command to take effect. Windows Embedded includes the EWF command line utility. This utility enables you to issue a set of commands to the EWF driver, report the status of each protected volume overlay, and report the format of the overall EWF configurations. Enhanced Write Filter 5

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82

The FBWF Status icon displays the following states:
Red lock: FBWF is disabled.
Green lock: FBWF is enabled.
Yellow lock: FBWF state will change on next boot.
If you are logged on as an administrator, you can change the status of FBWF by right-clicking the
icon and selecting the desired FBWF state.
NOTE:
Because the fbwfmgr.exe utility and the FBWF status service execute separate code, status
changes made by fbwfmgr.exe are not automatically reflected by the FBWF status icon.
If you use the command line to modify the FBWF, right-click the icon to refresh the status icon display
(click anywhere on the screen to close the context menu). The status icon display is refreshed
automatically when you make modifications through the FBWF Control Panel utility. The FBWF utility
always reflects the current status.
Enhanced Write Filter
The Enhanced Write Filter (EWF) provides a secure environment for your computer by protecting it
from undesired flash memory writes (the operating system and functional software components
reside in flash memory). The write filter also extends the life of the computer by preventing excessive
flash write activity. Instead of allowing writes directly to the flash memory, it intercepts all flash writes
and caches them.
To save changes to system configuration settings, you must disable the write filter cache or perform
the
-commit
command during the current boot session. Otherwise, the new settings will be lost when
the computer is shut down or restarted. If you do not want to make permanent changes, you can
enable the write filter.
The write filter cache contents are not lost when you log off and on again (as the same or different
user). You can disable the write filter cache after the new logon and still retain the changes.
After you disable the write filter, all future writes during the current boot session are written to the
flash with no further caching until the computer is restarted. You can also enable/disable the write
filter by using the command line.
NOTE:
Only an account with administrator privileges can enable, disable, or commit the enhanced
write filter.
NOTE:
Always enable the write filter after you have made all of your permanent changes.
Using the Enhanced Write Filter command line utility
CAUTION:
When using the
-commit
command, all of the temporary contents are permanently
written to the flash memory.
NOTE:
Because the Enhanced Write Filter commands are executed on the next boot, you must
restart the computer for the command to take effect.
Windows Embedded includes the EWF command line utility. This utility enables you to issue a set of
commands to the EWF driver, report the status of each protected volume overlay, and report the
format of the overall EWF configurations.
Enhanced Write Filter
5