# Operating Systems

Bring Your Own, Linux, Windows, Frame Agent Setup Tool, BYO Images on Azure, AWS, GCP, IBM and Nutanix AHV

# Operating System

Customers can deploy their applications on Frame-provided OS images if using a public cloud infrastructure or bring your own (BYO) OS images. The following table describes the options and considerations for each option.

<table id="bkmrk-os-image-source-supp" style="width: 100%; height: 239.828px;"><thead><tr style="height: 42.2812px;"><th style="width: 33.2924%; height: 42.2812px;">OS Image Source</th><th style="width: 33.2924%; height: 42.2812px;">Supported Infrastructures</th><th style="width: 33.2962%; height: 42.2812px;">Considerations</th></tr></thead><tbody><tr style="height: 107.406px;"><td style="width: 33.2924%; height: 107.406px;">[Bring Your Own (BYO)](https://docs.difr.com/books/platform-administrators-guide/page/bring-your-own)</td><td style="width: 33.2924%; height: 107.406px;">[Amazon Web Services](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-amazon-web-services), [Google Cloud Platform](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-google-cloud-platform), [IBM Cloud VPC](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-ibm-cloud) [Microsoft Azure](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-microsoft-azure), and [Nutanix AHV](https://docs.difr.com/books/platform-administrators-guide/page/ahv)</td><td style="width: 33.2962%; height: 107.406px;">Requires preparation and registration of image  
BYO Azure images can be less than the 128 GiB Microsoft Azure images (30 GiB to 2048 GiB)</td></tr><tr style="height: 90.1406px;"><td style="width: 33.2924%; height: 90.1406px;">Frame-provided</td><td style="width: 33.2924%; height: 90.1406px;">[Amazon Web Services](https://docs.difr.com/books/platform-administrators-guide/page/amazon-web-services), [Google Cloud Platform](https://docs.difr.com/books/platform-administrators-guide/page/google-cloud-platform), [IBM Cloud VPC](https://docs.difr.com/books/platform-administrators-guide/page/ibm-cloud-early-access), and [Microsoft Azure](https://docs.difr.com/books/platform-administrators-guide/page/azure)</td><td style="width: 33.2962%; height: 90.1406px;">Do not need your own OS image at Frame account creation</td></tr></tbody></table>

In both Frame-provided and BYO OS image options, customers are responsible for [OS licensing](https://docs.difr.com/books/platform-administrators-guide/page/microsoft-licensing-guide-for-frame), [application licensing](https://docs.difr.com/books/platform-administrators-guide/page/application-licensing), and OS and application updates.

## OS Template Image Guides

Once you have confirmed that the operating system you wish to bring is in the table of [Frame-supported operating systems](https://docs.difr.com/books/platform-administrators-guide/page/operating-systems-and-applications), you can consult the appropriate OS template image guide.

- [Windows OS](https://docs.difr.com/books/platform-administrators-guide/page/windows)
- [Linux (Ubuntu) OS](https://docs.difr.com/books/platform-administrators-guide/page/linux)

# Bring Your Own

Organizations have the ability to “bring your own” (BYO) images on their Frame cloud account(s) as template images. Once a template image is registered on their cloud account within Frame, administrators can create Frame accounts using the template image. Before selecting a BYO image guide from the list of infrastructure providers, please carefully review the requirements and considerations listed below.

## Requirements

- You have a 64-bit version of Windows or Linux operating system. 32-bit OS images are not supported.
- You have [downloaded](https://files.difr.com/) the latest Frame Guest Agent (FGA) Installer (Windows) or Frame Guest Agent Workload Installer (Linux).
- You are using your own infrastructure ([Amazon Web Services](https://docs.difr.com/books/platform-administrators-guide/page/amazon-web-services), [Google Cloud Platform](https://docs.difr.com/books/platform-administrators-guide/page/google-cloud-platform), [Microsoft Azure](https://docs.difr.com/books/platform-administrators-guide/page/azure), and [Nutanix AHV](https://docs.difr.com/books/platform-administrators-guide/page/ahv)).
- For AWS, Azure, and GCP, you must be using one or more of the public cloud infrastructure instance types listed in the tables [here](https://docs.difr.com/books/platform-administrators-guide/page/daas-supported-instance-types).
- Set your template image timezone to **UTC**. When users start a Frame session, the workload VM will be set, by default, to the correct timezone based on the user's browser locale.
- Ensure your template image VM network adapter is configured to obtain IP address from DHCP. If the IP address is a static IP address, the workload VMs (Sandbox, Utility Servers, test and production pool instances) created from your template image will not boot correctly.

## Procedure

In order to register your template image with Frame, you will need to perform the following steps:

1. [Download](https://files.difr.com) the Windows Frame Guest Agent (FGA) Installer or Linux Frame Workload Installer.
2. Prepare your [Windows](https://docs.difr.com/books/platform-administrators-guide/page/windows) or [Linux](https://docs.difr.com/books/platform-administrators-guide/page/linux) template image using the Frame installer in your chosen infrastructure.
3. Register your template image in the appropriate Cloud Account associated with the desired Frame Customer or Organization entity.

# Linux

This document will provide you with instructions on how to prepare and register your own template image for use with Frame. Before moving forward with the preparation procedure, please ensure you have read through the general requirements on the [BYO image](https://docs.difr.com/books/platform-administrators-guide/page/bring-your-own) page and considerations below.

## Considerations

- Create a template VM running a supported version of Ubuntu from an ISO or from the AWS, Azure, or GCP Marketplace.

## Create an Ubuntu Template Image VM

The following instructions assume you have an Ubuntu 24.04 ISO image in your desired infrastructure. If you already have an Ubuntu VM you wish to use as the starting point for your template VM, then you can skip to the installation of the Frame Guest Agent.

1. Create a VM using your Ubuntu ISO (mounted as a CD-ROM). The VM should have at least 2 vCPUs, 8 GB memory, 40 GiB disk, and a network interface.
2. Power on the VM and access the VM through the console or via ssh.
3. Choose your language.

<figure id="bkmrk-ubuntu-installer---l">![Ubuntu Installer - Language](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu1.png)

<figcaption>Ubuntu Installer - Language</figcaption></figure>2. If you are informed that there is an installer update available, choose "Continue" without updating to stay on version 20.04. You can always perform the updates later in the Sandbox.

<figure id="bkmrk-ubuntu-installer---u">![Ubuntu Installer - Update](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu2.png)

<figcaption>Ubuntu Installer - Update</figcaption></figure>3. Choose your Keyboard Configuration. Choose "Done" when complete.

<figure id="bkmrk-ubuntu-installer---k">![Ubuntu Installer - Keyboard Configuration](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu3.png)

<figcaption>Ubuntu Installer - Keyboard Configuration</figcaption></figure>4. Configure your Network Connections. Choose "Done" when complete.

<figure id="bkmrk-ubuntu-installer---n">![Ubuntu Installer - Network Connections](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu4.png)

<figcaption>Ubuntu Installer - Network Connections</figcaption></figure>5. Leave the Proxy Address field blank and choose "Done" (unless the VM needs to communicate to the Internet using an outbound proxy server).

<figure id="bkmrk-ubuntu-installer---p">![Ubuntu Installer - Proxy Server](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu5.png)

<figcaption>Ubuntu Installer - Proxy Server</figcaption></figure>6. Enter in your Archive Mirror address, if you have a preferred option. Choose "Done" when complete.

<figure id="bkmrk-ubuntu-installer---a">![Ubuntu Installer - Archive Mirror](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu6.png)

<figcaption>Ubuntu Installer - Archive Mirror</figcaption></figure>6. On the Guided storage configuration page, uncheck the Set up this disk as an LVM group option, then choose "Done".

<figure id="bkmrk-ubuntu-installer---g">![Ubuntu Installer - Guided Storage](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu7.png)

<figcaption>Ubuntu Installer - Guided Storage</figcaption></figure>7. On the Storage configuration page, choose "Done".

<figure id="bkmrk-ubuntu-installer---s">![Ubuntu Installer - Storage Configuration](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu8.png)

<figcaption>Ubuntu Installer - Storage Configuration</figcaption></figure>8. Confirm the “destructive action” (wiping/formatting the hard disk).

<figure id="bkmrk-ubuntu-installer---c">![Ubuntu Installer - Confirm Disk Formatting](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu9.png)

<figcaption>Ubuntu Installer - Confirm Disk Formatting</figcaption></figure>9. Provide computer/user information.

<figure id="bkmrk-ubuntu-installer---p-1">![Ubuntu Installer - Profile Setup](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu10.png)

<figcaption>Ubuntu Installer - Profile Setup</figcaption></figure>1. Install OpenSSH server.

<figure id="bkmrk-ubuntu-installer---o">![Ubuntu Installer - OpenSSH](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu11.png)

<figcaption>Ubuntu Installer - OpenSSH</figcaption></figure>11. Do not install any add-ons.

<figure id="bkmrk-ubuntu-installer---n-1">![Ubuntu Installer - No Add-Ons](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu12.png)

<figcaption>Ubuntu Installer - No Add-Ons</figcaption></figure>12. The installation will now begin.
13. When prompted, let the security updates install.

<figure id="bkmrk-ubuntu-installer---i">![Ubuntu Installer - Install Complete](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu13.png)

<figcaption>Ubuntu Installer - Install Complete</figcaption></figure>14. Reboot when prompted.

<figure id="bkmrk-ubuntu-installer---r">![Ubuntu Installer - Reboot](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ubuntu14.png)

<figcaption>Ubuntu Installer - Reboot</figcaption></figure>15. If prompted, press Enter to eject Ubuntu installation media.

## Install Frame Guest Agent

1. Download the Frame Workload Installer (Linux) to your local machine (or within the template VM) from the [Downloads page](https://files.difr.com/).
2. Unzip the Frame Workload Installer.
3. Untar the Frame Workload Installer tar file.
4. If you need to upload the Frame Workload Installer, use `winscp` to transfer the Frame Workload Installer file folder (frame\_workload\_installer\_linux-2.0.0 folder) to the template VM. This assumes you have installed and enabled OpenSSH in your Ubuntu VM.
5. Login to the Linux VM using account specified during installation of the operating system. In the Linux VM, `ls -al` to verify the `frame_workload_installer_linux-2.0.0` folder exists. Change directory to the folder.
6. Run `sudo bash prepare.sh`. Elevate if prompted.

<figure id="bkmrk-frame-guest-agent-wo">![Frame Guest Agent Workload Installer - prepare.sh](https://docs.difr.com/uploads/images/gallery/2025-10/fga-workload1.png)

<figcaption>Frame Guest Agent Workload Installer - prepare.sh</figcaption></figure>7. Upon completion, run `sudo bash install.sh`.

<figure id="bkmrk-frame-guest-agent-wo-1">![Frame Guest Agent Workload Installer - install.sh](https://docs.difr.com/uploads/images/gallery/2025-10/fga-workload2.png)

<figcaption>Frame Guest Agent Workload Installer - install.sh</figcaption></figure>8. Upon completion, shut down the VM.

### Tag Template

You will now need to tag the template VM, image, or snapshot (depending on the infrastructure) in order for Frame control plane to be able to recognize this template image. This process is exactly the same as what is required for tagging Windows template images.

Instructions for performing tagging, by infrastructure are at:

- [AHV](https://docs.difr.com/link/77#bkmrk-tag-vm)
- [AWS](https://docs.difr.com/link/74#bkmrk-tag-ami)
- [Azure](https://docs.difr.com/link/75#bkmrk-tag-snapshot)
- [GCP](https://docs.difr.com/link/76#bkmrk-create-image-from-vm)
- [IBM](https://docs.difr.com/link/78#bkmrk-tag-the-ibm-cloud-ma)

## Register Template Image

Once you have successfully created and tagged your template image(s) in your infrastructure, you will [register your template image](https://docs.difr.com/link/45#bkmrk-add-a-template-image).

##   
AWS Marketplace

  
If you want to use Ubuntu 24.04 from AWS Marketplace you must accept the terms of AWS Marketplace Ubuntu Image

1. Go to the **AWS Marketplace**

[![image.png](https://docs.difr.com/uploads/images/gallery/2025-10/scaled-1680-/kl0image.png)](https://docs.difr.com/uploads/images/gallery/2025-10/kl0image.png)

2\. Go to **"Discover products"** and search for the &lt;Ubuntu version&gt; (current supported version is 24.04)

[![image.png](https://docs.difr.com/uploads/images/gallery/2025-10/scaled-1680-/Ttzimage.png)](https://docs.difr.com/uploads/images/gallery/2025-10/Ttzimage.png)

3\. Select the image you want to use, scroll down to the end of the page and click on **Subscribe**

 **[![image.png](https://docs.difr.com/uploads/images/gallery/2025-10/scaled-1680-/9Mvimage.png)](https://docs.difr.com/uploads/images/gallery/2025-10/9Mvimage.png)**

[![image.png](https://docs.difr.com/uploads/images/gallery/2025-10/scaled-1680-/ZOFimage.png)](https://docs.difr.com/uploads/images/gallery/2025-10/ZOFimage.png)

**That's it, you are set to use the image from AWS Marketplace**

# Windows

## Considerations

- OEM versions of Microsoft Windows Operating Systems may contain third-party software which can potentially cause issues and undesired side effects when used in a hypervisor. Frame strongly recommends the use of a Microsoft-provided OS image (instead of an OEM version from a third party) or an OS image provided by the public cloud provide, if you are using a public cloud.
- Before registering the template image VM to Frame, Windows sysprep will need to be run to generalize the template image VM. The sysprep step will remove your template image VM from your domain. You will need to configure your Frame account for Windows Domain Join if you wish to have domain-joined workload VMs for your users.
- During image generalization with sysprep, there are certain conditions where Microsoft Store apps (AppX packages) could cause sysprep to fail. Please reference [this Microsoft article](https://support.microsoft.com/en-us/help/2769827/sysprep-fails-after-you-remove-or-update-windows-store-apps-that-inclu) for additional details.
- If you require HTTPS traffic from your workload VMs to pass through an authenticated (or unauthenticated) proxy server to reach the Internet, you will need to: 
    - Configure the Frame Guest Agent proxy settings. Frame Guest Agent supports authenticated (username/password) and unauthenticated proxy servers, provided they can handle HTTPS and Secure WebSocket traffic. Refer to our [FGA Proxy Server documentation](https://docs.difr.com/books/platform-administrators-guide/page/frame-agent-setup-tool-fast#bkmrk-fga-proxy-helper-too) page for further details.
    - Configure your Windows proxy server settings for your end user applications.
- Create a local Windows user account with local administrator privileges, if one does not exist in your template image. Do not use the reserved Frame local Windows users (added to local Windows Administrators group) and .
- Enable Microsoft RDP in your template image before installing the Frame Guest Agent to access the template image VM. Verify you can access your template image using RDP with your local Windows administrator user.
- Verify that your template image does not have a Windows recovery partition using Windows Disk Management. A recovery partition within the template image will prevent Frame from successfully increasing the disk size of the Sandbox, Utility server(s), and persistent desktop VMs. Remove the recovery partition using Windows .

<details id="bkmrk-note%3A-image-optimiza"><summary>Note: Image Optimization</summary>

- Third-party image optimizers can be used to optimize the efficient operation of the Windows image during Sandbox configuration.
- Some examples of third-party image optimizers that can be used with Frame are Citrix Optimizer, Best Practice Analyzer, VMware Windows OS Optimization Tool, or the community-supported WOSTT.
- These third-party tools are used with no warranty or support.  
    Dizzion strongly recommends you create a backup of your Sandbox before running any of these optimizer tools.

</details>## Minimum Instance Type Configuration

End user experience is highly dependent on the underlying VM resources in combination with the demands of the operating system and user applications. For Windows OS, we recommend a minimum instance type configuration of:

- 2 vCPU
- 4 GB memory
- 45 GB disk

You may need to increase the vCPU count, memory, and disk space based on your use case(s), operating system, applications, and user experience expectations.

## Supported Windows versions

Frame supports the following Windows operating system versions:

- Windows 10, 1909 and higher
- Windows 11, 21H2 and higher
- Windows Server 2019, 1809 and higher
- Windows Server 2022, Windows Server 2025

## Prepare your Windows Template Image

- [AHV](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-nutanix-ahv)
- [AWS](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-amazon-web-services)
- [Azure](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-microsoft-azure)
- [GCP](https://docs.difr.com/books/platform-administrators-guide/page/byo-images-on-google-cloud-platform)

**Important: GPU Drivers**

If you plan to use AMD or NVIDIA GPU-backed instance types, only use the Frame-verified drivers listed below. Frame cannot offer support for any other driver version or combinations. The following drivers have been validated:

<details id="bkmrk-driver-version-detai"><summary>**Driver Version Details**</summary>

**AHV**

- NVIDIA driver version: `<strong>527.41</strong>`

**AWS**

- NVIDIA driver version: `<strong>513.46</strong>`
- AMD driver version: `<strong>20.10.25.04</strong>`

{" "}

**Azure**

- NVIDIA driver version:{" "} `      <strong>512.78</strong>    `
- AMD driver version:{" "} `      <strong>21Q2-1</strong>    `

**GCP**

- NVIDIA driver version: `<strong>513.46</strong>`

</details>## Register Template Image

Once you have successfully created and tagged your template image(s) in your infrastructure, you will [register your template image](https://docs.difr.com/books/platform-administrators-guide/page/cloud-accounts#template-images).

## Frame Sysprep Helper Tool

The Frame Sysprep Helper Tool is designed to simplify the Microsoft Sysprep process by parsing errors reported by sysprep and immediately repairing them when possible. Sysprep is executed:

1. When a Windows template image is prepared.
2. Each time an administrator publishes a Sandbox in a domain-joined Frame account.

<figure id="bkmrk-frame-sysprep-helper-1">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/Jnwimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/Jnwimage.png)

<figcaption>Frame Sysprep Helper Tool</figcaption></figure>Frame Sysprep Helper can be used in two ways:

1. As a desktop application for Sysprep testing.
2. As a console app, used in scenarios where administrators want to automate sysprep error-fixing during account publishing.

<p class="callout info"> If you start the Sysprep Helper Tool as a desktop application on your Sandbox and Sysprep succeeds, you must reboot your instance.</p>

### Using Sysprep Helper Tool

The Sysprep Helper Tool is included as part of Frame Tools. The executable is located in . The tool can be used instead of Microsoft-provided Sysprep.exe when attempting to automatically resolve issues during Sysprep execution.

To use the Frame Sysprep Helper Tool when publishing a DJI-enabled Frame account, add default Sysprep type key in the Windows system registry.

Key **AdvancedSysprep**

- for standard Sysprep
- for Sysprep using Sysprep Helper Tool

You can also enable/disable this setting by using the checkbox in the Sysprep Helper UI.

<p class="callout info"> If the registry entry is missing or the value is , generalization during publish will run the standard Sysprep process.</p>

### Publishing Process

Sysprep is executed during a publish of persistent desktops (in non-domain-joined and domain-joined Frame accounts) and non-persistent domain-joined Frame accounts. The following PowerShell script is executed:

Sysprep script will perform various cleanup tasks and then execute a final generalization task: Sysprep.exe with appropriate arguments.

The workflow:

1. Retrieves OS information
2. Checks activation status
3. Checks antivirus status
4. Removes existing user profiles

### Logging

Frame Sysprep Helper logs can be found in: `C:\ProgramData\Nutanix\Frame\Logs\Sysprep-helper.txt`

# Frame Agent Setup Tool (FAST)

The Frame Agent Setup Tool (FAST) is used to install Frame Agent, Frame drivers, and Frame tools on your template image. FAST is also used to keep the Frame components on your template image(s), Sandboxes, Utility server(s), and persistent desktops up-to-date, regardless of infrastructure or instance types being used.

When using FAST to prepare a template image for use in Frame, RDP will continue to function (unlike the Frame Guest Agent Installer). Once the template image is used by Frame to provision workload VMs in a Frame account, administrators will need to enable the [RDP Debug Mode](https://docs.difr.com/books/platform-administrators-guide/page/rdp-debug-mode) feature to access Frame-managed workloads via RDP.

<p class="callout info"> Before using FAST to install, update, or remove Frame components, ensure that there is a valid backup of the VM. 2. FAST is not a package repair tool. If you encounter issues with broken MSI installations, you will need to repair MSI installations manually or use 3rd party software tools.</p>

### Requirements

In order for FAST to download the required Frame components for installation or update, the VM running FAST must be able to reach the following Internet FQDNs via tcp/443 (HTTPS), as discussed in [Networking Requirements](https://docs.difr.com/link/51#bkmrk-requirements):

1. download.visualstudio.microsoft.com
2. downloads.console.nutanix.com

### Installation

<p class="callout info"> FAST is included in Frame-provided Windows OS images in public cloud. If you are using a Frame-provided image, the FAST executable will be in the `C:\\ProgramData\\Nutanix\\Frame\\Tools` folder.</p>

1. Download the Frame Agent Setup Tool from the [Downloads page](https://files.difr.com/) into your template image or existing Sandbox, Utility Server, and/or persistent desktops.
2. Run the executable to launch the Frame Agent Setup Tool.

### Usage

The FAST utility has two different views: Bundle View and Updater View. When you run FAST, it will search for the Frame Guest Agent and Server components. If Frame Guest Agent cannot be found (e.g. clean Windows OS image), FAST will start in [Bundle View](#bundle-view). If Frame Guest Agent is already installed, FAST will start in [Updater View](#updater-view).

Bundle View

When FAST is started and determines the Frame Guest Agent is not present on the VM (such as when you are preparing a template image to be used in Frame):

1. A dialog prompt will open. Accept the terms and conditions and click the “Next” button to continue.

<figure class="admin-ui" id="bkmrk-">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/PFTimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/PFTimage.png)

</figure>2\. Click on \*\*Select All\*\* for all of the packages to be installed or install specific packages by checking the associated boxes. Frame Guest Agent and Frame Server will be installed automatically. Click the \*\*Install\*\* button to continue.

<figure class="admin-ui" id="bkmrk--1">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/yuzimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/yuzimage.png)

</figure>Each package will be downloaded and then installed, one by one. See the example below:

<figure class="admin-ui" id="bkmrk--2">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/dWNimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/dWNimage.png)

</figure>1\. When all components are installed, you may either \*\*Exit\*\* the Frame Agent Setup Tool to perform additional tasks in the VM or \*\*Reboot\*\* the VM. The VM must be rebooted for the Frame components to take effect.

<figure class="admin-ui" id="bkmrk--3">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/laMimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/laMimage.png)

</figure>#### Updater View

When FAST is started and determines the Frame Guest Agent is present on the VM (Sandbox, Utility server, and/or Persistent Desktops), FAST will display the Updater view.

Enable or disable the **Show Early Access Components** if you wish to see or not see the components that have an Early Access version.

**Single Component Installation**

To install/update an individual component, click either on the appropriate action on the right side (Download or Download and Install). You can double click the component row to view the component version number (current and latest), release notes, and link to documentation. Click on **Download and Install** to begin the download and installation process or **Cancel** to return to the component list.

<figure class="admin-ui" id="bkmrk--4">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/8YJimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/8YJimage.png)

</figure>**Multi-Component Installation**

1. Select the desired component(s) for update or installation by checking the associated checkboxes.

<figure class="admin-ui" id="bkmrk--5">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/nGTimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/nGTimage.png)

</figure>2\. Click the toggle located at the bottom of the window to acknowledge the machine has been backed up. 3. Click the "Download" or "Download and Install" icon at the upper left corner of the FAST application window. FAST will not update the Frame Agent and Frame Server components, if they are up to date. 4. Accept the prompt by clicking \*\*OK\*\*. FAST will download and install the selected components.

<figure class="admin-ui" id="bkmrk--6">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/hcVimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/hcVimage.png)

</figure>5\. When all components are updated, you can close the Frame Agent Setup Tool.

### Package Statuses

In the Updater View, FAST will display the status of each package. Definitions for each of the package status are described in the following table.

<table id="bkmrk-status-description-u"><thead><tr><th>Status</th><th>Description</th></tr></thead><tbody><tr><td>Up to Date</td><td>A package found on the machine is already up-to-date with the latest version.</td></tr><tr><td>Update Required</td><td>An installed package requires an update. Failure to update could result in system instability or compatibility conflicts.</td></tr><tr><td>Update Available</td><td>An installed package has an optional update. While not required, this update could improve performance or add new features.</td></tr><tr><td>Not Installed</td><td>An optional package is not installed.</td></tr></tbody></table>

### Command-Line Usage

You may want to automate Frame Agent Setup Tool to update all components of your Frame virtual machines programmatically. In that case, Frame Agent Setup Tool can be executed with various arguments to orchestrate installation and updates. For example, if you execute on the Windows command line:

```
 FrameAgentSetupTool.exe getpackages
```

FAST will list all missing or obsolete packages.

### Arguments

<table id="bkmrk-name-description-%2F%3F-"><thead><tr><th>Name</th><th>Description</th></tr></thead><tbody><tr><td>`/?`</td><td>Display help</td></tr><tr><td>`getpackages`</td><td>Display a list of all missing/obsolete packages</td></tr><tr><td>`getpackages json`</td><td>Display a list of all missing/obsolete packages in json format</td></tr><tr><td>`install`</td><td>Install all missing/obsolete packages</td></tr><tr><td>`install only ...`</td><td>Install only provided packages</td></tr><tr><td>`install except ...`</td><td>Install all missing/obsolete packages except provided packages</td></tr><tr><td>`install frameimage`</td><td>Install all system and Frame components</td></tr><tr><td>`install only frameimage`</td><td>Install only provided applications and all Frame system components</td></tr><tr><td>`install except frameimage`</td><td>Install all available application except listed ones after installation of Frame system components</td></tr></tbody></table>

### Supported Applications &amp; Drivers

In addition to the Frame Guest Agent and Frame Server, FAST installs and updates the following drivers and tools.

<table id="bkmrk-name-description-fra"><thead><tr><th>Name</th><th>Description</th></tr></thead><tbody><tr><td>Frame Audio Driver</td><td>Enables Frame to properly interface with the audio card on the workload VM for use in a Frame session.</td></tr><tr><td>Frame Video Driver</td><td>Enables Frame to properly interface with the video card on the workload VM for use in a Frame session.</td></tr><tr><td>Liquidware ProfileDisk</td><td>Enables support for Frame Enterprise Profiles in a Frame session (non-persistent only).</td></tr><tr><td>Frame Pen Driver</td><td>Enables support for digital pen tablets in a Frame session (requires supported endpoint device).</td></tr><tr><td>Frame Printer Driver</td><td>Enables support for Frame Printer in a Frame session.</td></tr><tr><td>Frame Scanner Driver</td><td>Enables support for WIA scanners in a Frame session (requires supported endpoint device).</td></tr><tr><td>Frame SmartCard Driver</td><td>Enables support for CAC/SmartCards in a Frame session (requires supported endpoint device).</td></tr><tr><td>Frame USB Driver</td><td>Enables support for Generic USB in a Frame session (requires supported endpoint device).</td></tr><tr><td>Frame AD Helper</td><td>Tool for troubleshooting issues with joining a Frame workload VM to an Active Directory domain.</td></tr><tr><td>Frame Proxy Helper</td><td>Tool for configuring Frame Agent to function properly with proxy servers.</td></tr><tr><td>Frame Sysprep Helper</td><td>Tool for troubleshooting and automatically resolving issues related to Windows Sysprep.</td></tr></tbody></table>

### FGA Proxy Helper Tool

The FGA must be able to communicate with the Frame control plane in order for Frame Platform to be able to orchestrate and broker users into these workload VMs. If your workload VMs must connect to an outbound proxy server to reach the Internet, you will need to configure (or update) the FGA Proxy Settings once the Frame Guest Agent is installed (or if your outbound proxy server information changes). The proxy settings apply **only** to the Frame Guest Agent. You will need to configure the Windows proxy server settings for Windows OS and your applications separately.

The Proxy Helper tool `FrameProxyHelper.exe` is located in the Frame Tools directory `C:\ProgramData\Nutanix\Frame\Tools`.

<figure class="admin-ui" id="bkmrk-fga-proxy-helper-too-1">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/oUUimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/oUUimage.png)

  
<figcaption>  
</figcaption></figure>**Server:** The IP address of the outbound proxy server.  
**Port:** The desired port on the outbound proxy server.

If your proxy server requires basic authentication, select "Use following credentials for authentication" and enter the "Username" and "Password." You can then test the settings by clicking "Start test" and save them by clicking "Save Settings".

## Manual installation and repair of the Frame Agent and its components

This guide outlines the process for installing and repairing the Frame Agent and its associated system components. It is beneficial for repairing or reinstalling the Agent on Persistent Desktops, as well as upgrading Frame components on the Sandbox.

#### Prerequisites:<span class="heading-anchor-wrapper" role="presentation"><button aria-hidden="true" class="css-vhh4ux" data-testid="anchor-button" type="button"><span aria-label="Copy" class="_1e0c1o8l _vchhusvi _1o9zidpf _vwz4kb7n _y4ti1igz _bozg1mb9 _12va1onz _jcxd1r8n" role="img"><svg class="_1reo15vq _18m915vq _syaz1r31 _lcxvglyw _s7n4yfq0 _vc881r31 _1bsbpxbi _4t3ipxbi" fill="none" role="presentation" viewbox="0 0 16 16"><path clip-rule="evenodd" d="M8.22 2.22a3.932 3.932 0 1 1 5.56 5.56l-2.25 2.25-1.06-1.06 2.25-2.25a2.432 2.432 0 0 0-3.44-3.44L7.03 5.53 5.97 4.47zm3.06 3.56-5.5 5.5-1.06-1.06 5.5-5.5zM2.22 8.22l2.25-2.25 1.06 1.06-2.25 2.25a2.432 2.432 0 0 0 3.44 3.44l2.25-2.25 1.06 1.06-2.25 2.25a3.932 3.932 0 1 1-5.56-5.56" fill="currentcolor" fill-rule="evenodd"></path></svg></span></button></span>

Dizzion strongly advises administrators to back up before proceeding.

#### Solution:<span class="heading-anchor-wrapper" role="presentation"><button aria-hidden="true" class="css-vhh4ux" data-testid="anchor-button" type="button"><span aria-label="Copy" class="_1e0c1o8l _vchhusvi _1o9zidpf _vwz4kb7n _y4ti1igz _bozg1mb9 _12va1onz _jcxd1r8n" role="img"><svg class="_1reo15vq _18m915vq _syaz1r31 _lcxvglyw _s7n4yfq0 _vc881r31 _1bsbpxbi _4t3ipxbi" fill="none" role="presentation" viewbox="0 0 16 16"><path clip-rule="evenodd" d="M8.22 2.22a3.932 3.932 0 1 1 5.56 5.56l-2.25 2.25-1.06-1.06 2.25-2.25a2.432 2.432 0 0 0-3.44-3.44L7.03 5.53 5.97 4.47zm3.06 3.56-5.5 5.5-1.06-1.06 5.5-5.5zM2.22 8.22l2.25-2.25 1.06 1.06-2.25 2.25a2.432 2.432 0 0 0 3.44 3.44l2.25-2.25 1.06 1.06-2.25 2.25a3.932 3.932 0 1 1-5.56-5.56" fill="currentcolor" fill-rule="evenodd"></path></svg></span></button></span>

1. Please make sure you create a backup before starting the installation or repair process.
2. Start a session or connect via Remote Desktop Protocol (RDP) if the Frame session is unavailable.
3. Open Terminal as an administrator.
4. Navigate to the Frame Tools directory by running:  
      
    ```
    cd C:\ProgramData\Nutanix\Frame\Tools
    ```
5. Execute the installation script:  
      
    ```
    .\FrameAgentSetupTool.exe install frameimage
    ```

<div class="rich-media-item mediaSingleView-content-wrap image-center css-wmwdcs" data-layout="center" data-media-vc-wrapper="true" data-node-type="mediaSingle" data-renderer-start-pos="868" data-ssr-placeholder="Eb7Gh:EfLS5:z8NN7:qz-Pe:Y6119-0" data-vc="media-single" data-width="760" data-width-type="pixel" id="bkmrk--7"></div>[![image.png](https://docs.difr.com/uploads/images/gallery/2026-01/scaled-1680-/lCyimage.png)](https://docs.difr.com/uploads/images/gallery/2026-01/lCyimage.png)

This process installs all required system dependencies, including Frame drivers and updated components.

6. Reboot and Validate  
    After installation, reboot the system and verify the installation.

<p class="callout info"> Handy to know; You can re-install and re-register all FAST components by holding the left Shift Key, and then running FAST</p>

## Troubleshooting

#### Logs

The Frame Agent Setup Tool generates a log file for troubleshooting which is located in: C:\\ProgramData\\Nutanix\\Frame\\Logs

Take a look at these and if you need further assistance, open a [support ticket](https://support.dizzion.com/hc/en-us).

# BYO Images on Amazon Web Services

This document will provide you with instructions on how to prepare and register your own template image in AWS for use with Frame. Before moving forward with the preparation procedure, please ensure you have read through the general requirements and considerations on the [Windows BYO image](https://docs.difr.com/books/platform-administrators-guide/page/windows) page. We will outline additional details specific to AWS public cloud below.

## Considerations

The base Frame Sandbox images in AWS are based on either the “Microsoft Windows Server 2019 Base” or “Microsoft Windows Server 2022 Base” operating system from the AWS Marketplace. The Sandboxes created from these Frame-provided images have the Frame Agent pre-installed and are a great starting point for admins to create the desired user experience. This is the default deployment workflow for Frame administrators.

In some cases, the enterprise IT department may already have a disk image that has been validated by the organization. It may be easier to deploy Frame, if this image is the base image for their Frame accounts. If you chose to bring your own image, you will need to upload and register that image as an AMI in your AWS subscription prior to installing the Frame Agent.

In rare instances, customers may want to build the BYO image themselves from the base AWS Marketplace images. This is also supported if you start with the “Microsoft Windows Server 2019 Base” or “Microsoft Windows Server 2022 Base” images in the AWS Marketplace. Community and third-party AWS Marketplace AMIs have not been tested.

## Preparation

1. First, starting with a Windows Server 2019 or Windows Server 2022 AMI, create a VM in the AWS account you are going to use for Frame. When configuring your image, you must use a Windows OS user account with local Windows administrator privileges.

<figure id="bkmrk-aws-console---ec2-li">![AWS Console - EC2 List](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-aws-windows1.png)

<figcaption>AWS Console - EC2 List</figcaption></figure>2. Use RDP to connect into your VM. Follow the [Installation](https://docs.difr.com/link/73#bkmrk-installation) and [Usage](https://docs.difr.com/link/73#bkmrk-usage) instructions to download the Frame Agent Setup Tool (FAST) and install the Frame Agent, drivers, and tools in your template image VM.

3. Once FAST has successfully installed the Frame Agent, drivers, and tools, reboot the VM to complete the installation of the Frame Agent. Use RDP to connect back into your VM.

<p class="callout info"> For additional installation scenarios (e.g., proxy server configuration, command line arguments, review our \[Frame Agent Setup Tool\](/books/platform-administrators-guide/page/windows/frame-agent-setup-tool) documentation.</p>

4. **(Optional)**: If a proxy server is required for all outbound traffic to the Internet from your private network, you will need to configure Frame Guest Agent to use your proxy server. Refer to our [FGA Proxy Helper Tool](https://docs.difr.com/link/73#bkmrk-fga-proxy-helper-too) documentation page for further details.
5. **(Optional)**: If you plan to use AMD or NVIDIA GPU-based instance types in AWS, make sure you install the appropriate [AMD](https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/install-amd-driver.html) or [NVIDIA](https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/install-nvidia-driver.html) GPU drivers in your template image VM.

<p class="callout info">**Important Frame-verified GPU Drivers**  
 The following driver versions have been validated for use with Frame workload VMs. Frame cannot offer support for any other driver version or combinations.   
 For **AWS**, use:  
 - NVIDIA driver version: 552.08  
 - AMD driver version: 23.10.02.02</p>

6. **(Optional)**: Install your applications and finish image customization.
7. Once you have configured the image as desired, launch the Sysprep Helper tool.  
      
    \- Select Accept all prompts during Sysprep  
    \- change power option from quiet to shutdown  
    \- Click on "**Test Sysprep"** to start the process  
      
    After the sysprep process finished successfully the vm will be powered of automatically.

<figure id="bkmrk--1">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/e7zimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/e7zimage.png)

</figure>8. If the VM does not shutdown, then there was a problem with sysprep. Review the sysprep logs in to determine the source of the error.

<figure id="bkmrk--3">![Windows - Sysprep Log Path](https://docs.difr.com/uploads/images/gallery/2025-10/sysprep-logs.png)

<figcaption>  
</figcaption></figure>10. When sysprep is successful, the VM will automatically power off. Verify that the VM has stopped in AWS Console.

### Tag AMI

11. Create an image from your AWS instance.
12. Once the image is created, navigate to the list of images/AMIs in the AWS console. Click on the AMI you created in the previous step and assign a tag with the Key name and value to the AMI.
13. Add the second tag with the Key name and the value to the AMI.

<figure id="bkmrk-aws-console---add-ta">![AWS Console - Add Tags](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-aws-windows2.png)

<figcaption>AWS Console - Add Tags</figcaption></figure>Voilà! You have successfully created a template image to be registered in Frame for use to create your Frame workloads. You may prepare additional template images (e.g., different Windows OS versions, template images with different sets of applications) by simply repeating the procedure with a new image.

## Registration

Now it's time to register your template image in Frame. See how to do this in our [Cloud Accounts &gt; Template Images](https://docs.difr.com/link/45#bkmrk-add-a-template-image) guide.

# BYO Images on Microsoft Azure

This document will provide you with instructions on how to prepare and register your own template image in Azure for use with Frame. Before moving forward with the preparation procedure, please ensure you have read through the general requirements and considerations on the [Windows BYO image](https://docs.difr.com/books/platform-administrators-guide/page/windows) page. We will outline additional details specific to Azure public cloud below.

## Considerations

- When creating a new template image for Azure, we recommend you start with the Microsoft-provided Windows 10, Windows 11, Windows Server 2019, or Windows Server 2022 images. Community and third-party Azure Marketplace VMs have not been tested.
- We recommend using 1909, 20H1, 20H2, or 21H1 editions of Windows 10 Pro/Enterprise. Windows 10 Enterprise multi-session images are not supported.
- Azure Generation 1 and 2 VMs are supported. If you plan to use Windows 11 with vTPM, you must use Azure [Generation 2](https://learn.microsoft.com/en-us/azure/virtual-machines/generation-2) VMs.
- Limit Azure image/snapshot name to 50 characters to avoid deployment issues in Frame.
- You may bring your own image, but the procedure below assumes you have uploaded the image to Azure and verified that a Windows VM instance built using your image operates correctly in Azure.

## Image Preparation

1. First, starting with a Windows 10, Windows 11, Windows Server 2019, or Windows Server 2022 image, create a VM in the Azure account you are going to use for Frame. When configuring your image, you must use a Windows OS user account with local Windows administrator privileges. For Windows 11 with vTPM, deploy a trusted launch VM as discussed in the Microsoft documentation page [Deploy a trusted launch VM](https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch-portal) before proceeding to Step 2.

<figure id="bkmrk-azure-portal---vm-li">![Azure Portal - VM List](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-azure-windows1.png)

<figcaption>Azure Portal - VM List</figcaption></figure>2. Use RDP to connect into your VM. Follow the [Installation](https://docs.difr.com/link/73#bkmrk-page-title) and [Usage](https://docs.difr.com/link/73#bkmrk-usage) instructions to download the Frame Agent Setup Tool (FAST) and install the Frame Agent, drivers, and tools in your template image VM.
3. Once FAST has successfully installed the Frame Agent, drivers, and tools, reboot the VM to complete the installation of the Frame Agent. Use RDP to connect back into your VM.

For additional installation scenarios (e.g., proxy server configuration, command line arguments, review our [Frame Agent Setup Tool](https://docs.difr.com/link/73#bkmrk-page-title) documentation.

4. **(Optional)**: If a proxy server is required for all outbound traffic to the Internet from your private network, you will need to configure Frame Guest Agent to use your proxy server. Refer to our [FGA Proxy Helper Tool](https://docs.difr.com/link/73#bkmrk-fga-proxy-helper-too) documentation page for further details.
5. **(Optional)**: If you plan to use AMD or NVIDIA GPU-based instance types in Azure, make sure you install the appropriate [AMD](https://docs.microsoft.com/en-us/azure/virtual-machines/windows/n-series-amd-driver-setup) or [NVIDIA](https://docs.microsoft.com/en-us/azure/virtual-machines/windows/n-series-driver-setup) GPU drivers in your template image VM.

<p class="callout info">**Important Frame-verified GPU Drivers**  
 The following driver versions have been validated for use with Frame workload VMs. Frame cannot offer support for any other driver version or combinations.  
 For **AWS**, use:  
 - NVIDIA driver version: 552.08  
 - AMD driver version: 23.10.02.02</p>

6. **(Optional)**: Install your applications and finish image customization.
    
    
    6. Once you have configured the image as desired, launch the Sysprep Helper tool.  
          
        \- Select Accept all prompts during Sysprep  
        \- change power option from quiet to shutdown  
        \- Click on "**Test Sysprep"** to start the process  
          
        After the sysprep process finished successfully the vm will be powered of automatically.

<figure id="bkmrk-%C2%A0">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/xIIimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/xIIimage.png)

<figcaption>  
</figcaption></figure>8. If the VM does not shutdown, then there was a problem with sysprep. Review the sysprep logs in to determine the source of the error.

<figure id="bkmrk-">![Windows - Sysprep Log Path](https://docs.difr.com/uploads/images/gallery/2025-10/sysprep-logs.png)

<figcaption>  
</figcaption></figure>10. When sysprep is successful, the VM will automatically power off. Verify that the VM has stopped in Azure Console.

<figure id="bkmrk--1">![Azure Portal - VM List](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-azure-windows2.png)

<figcaption>  
</figcaption></figure>### Tag Snapshot

To use the template image to create VMs (e.g., Sandbox VM), you need to snapshot the VM disk you prepared and label the snapshot for Frame. Use of a snapshot eliminates the need for Azure to run sysprep again when the new VM is created from the template image.

11. Navigate to the list of disks for the Azure VM.

<figure id="bkmrk--2">![Azure Portal - List of Disks](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-azure-windows3.png)

<figcaption>  
</figcaption></figure>12. Take a snapshot of the OS disk.

<figure id="bkmrk--3">![Azure Portal - Create Snapshot](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-azure-windows4.png)

<figcaption>  
</figcaption></figure>13. Make sure you choose "Standard\_HDD" for storage type, leave the default encryption type, and select "Public endpoint" for connectivity method.

<figure id="bkmrk--4">![Azure Portal - Create Snapshot, Part 2](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-azure-windows5.png)

<figcaption>  
</figcaption></figure>14. Once the image is created, navigate to the list of snapshots in the Azure Portal. Click on the snapshot you created in the previous step and assign a tag with the name and the value to the snapshot.
15. Assign a second tag with the name and the value to the snapshot.

<figure id="bkmrk--5">![Azure Portal - Add Tags](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-azure-windows6.png)

<figcaption>  
</figcaption></figure>Voilà! You have successfully created a template image to be registered in Frame for use to create your Frame workloads. You may prepare additional template images (e.g., different Windows OS versions, template images with different sets of applications) by simply repeating the procedure with a new image.

## Registration

Now it's time to register your template image in Frame. See how to do this in our [Cloud Accounts &gt; Template Images](https://docs.difr.com/link/45#bkmrk-add-a-template-image) guide.

# BYO Images on Google Cloud Platform

This document will provide you with instructions on how to prepare and register your own template image in GCP for use with Frame. Before moving forward with the preparation procedure, please ensure you have read through the general requirements and considerations on the [Windows BYO image](https://docs.difr.com/books/platform-administrators-guide/page/windows) page. We will outline additional details specific to GCP public cloud below.

## Considerations

- When creating a new template image for GCP, we recommend you start with “Microsoft Windows Server 2019” or “Microsoft Windows Server 2022” x64 Datacenter editions with Desktop Experience from the Google Marketplace. Community and third-party Google Marketplace images have not tested.
- You may bring your own image, but the procedure below assumes you have uploaded the image to GCP and verified that a Windows VM instance built using your image operates correctly.

## Preparation

1. First, starting with a Windows Server 2019 or Windows Server 2022 image, create a VM in the GCP project you are going to use for Frame. When configuring your image, you must use a Windows OS user account with local Windows administrator privileges.
2. Use RDP to connect into your VM. Follow the [Installation](http://docs.difr.com/books/platform-administrators-guide/page/frame-agent-setup-tool-fast#bkmrk-installation) and [Usage](https://docs.difr.com/books/platform-administrators-guide/page/frame-agent-setup-tool-fast#bkmrk-usage) instructions to download the Frame Agent Setup Tool (FAST) and install the Frame Agent, drivers, and tools in your template image VM.

3. Once FAST has successfully installed the Frame Agent, drivers, and tools, reboot the VM to complete the installation of the Frame Agent. Use RDP to connect back into your VM.

<p class="callout info"> For additional installation scenarios (e.g., proxy server configuration, command line arguments, review our [Frame Agent Setup Tool](https://docs.difr.com/books/platform-administrators-guide/page/frame-agent-setup-tool-fast) documentation.</p>

4. **(Optional)**: If a proxy server is required for all outbound traffic to the Internet from your private network, you will need to configure Frame Guest Agent to use your proxy server. Refer to our [FGA Proxy Helper Tool](https://docs.difr.com/books/platform-administrators-guide/page/frame-agent-setup-tool-fast#bkmrk-fga-proxy-helper-too) documentation page for further details.
5. **(Optional)**: If you plan to use NVIDIA GPU-based instance types in GCP, make sure you install the appropriate [NVIDIA](https://cloud.google.com/compute/docs/gpus/grid-drivers-table#windows_drivers) GPU drivers in your template image VM.

<p class="callout info">**Important Frame-verified GPU Drivers**  
 The following driver versions have been validated for use with Frame workload VMs. Frame cannot offer support for any other driver version or combinations.  
 For **AWS**, use:  
 - NVIDIA driver version: 552.08  
 - AMD driver version: 23.10.02.02</p>

6. **(Optional)**: Install your applications and finish image customization.
    
    
    6. Once you have configured the image as desired, launch the Sysprep Helper tool.  
          
        \- Select Accept all prompts during Sysprep  
        \- change power option from quiet to shutdown  
        \- Click on "**Test Sysprep"** to start the process  
          
        After the sysprep process finished successfully the vm will be powered of automatically.

<figure id="bkmrk-">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/VWLimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/VWLimage.png)

<figcaption>  
</figcaption></figure>8. If the VM does not shutdown, then there was a problem with sysprep. Review the sysprep logs in to determine the source of the error.

<figure id="bkmrk--1">![Windows - Sysprep Log Path](https://docs.difr.com/uploads/images/gallery/2025-10/sysprep-logs.png)

<figcaption>  
</figcaption></figure>10. When sysprep is successful, the VM will automatically power off. Verify that the VM has stopped in GCP Console.

<figure id="bkmrk--2">![GCP Console - Stopped VM](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-gcp-windows2.png)

<figcaption>  
</figcaption></figure>### Create Image from VM

11. Click on the name of the stopped VM to get to the properties of the VM.

<figure id="bkmrk--3">![GCP Console - VM Properties](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-gcp-windows3.png)

<figcaption>  
</figcaption></figure>12. Scroll down and locate "Boot disk", click on the VM Name link under the “Name” column.

<figure id="bkmrk--4">![GCP Console - Manage Disk](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-gcp-windows4.png)

<figcaption>  
</figcaption></figure>13. On the disk’s properties page, click "Create Image" and then complete the **Create an Image** form:

<figure id="bkmrk--5">![GCP Console - Create an Image](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-gcp-windows5.png)

<figcaption>  
</figcaption></figure>- **Name**: Specify the name of the image.
- **Source**: Specify the source to be **Disk**.
- **Source disk**: Confirm the source disk.
- **Location**: Select the region or regions you want this image available in.
- **Description:** Specify a description for this image.
- **Labels**: Add the labels required by Frame to recognize this image as a Frame template image. 
    - Key with value
    - Key with value

14. Click **Create** to create a GCP image from your VM disk with the required Frame labels.

Voilà! You have successfully created a template image to be registered in Frame for use to create your Frame workloads. You may prepare additional template images (e.g., different Windows OS versions, template images with different sets of applications) by simply repeating the procedure with a new image.

## Label Image

If you already have a GCP Windows OS image that was already prepared and sysprepped, you can simply label the image using the following procedure in Google Console and use it in Frame.

15. Navigate to the machine image in the Google console (under Storage &gt; Images) and locate the image associated with the virtual machine you created. Check the checkbox for the image, select SHOW INFO PANEL, and click on the LABELS tab.

<figure id="bkmrk--6">![GCP Console - Storage > Images](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-gcp-windows6.png)

<figcaption>  
</figcaption></figure>16. Click on "+ ADD LABEL" and fill out the required fields and assign a label of Key and value , as shown below.

<figure id="bkmrk--7">![GCP Console - Add Labels](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-gcp-windows7.png)

<figcaption>  
</figcaption></figure>17. Add a label of Key and value .
18. Click "Save" when you have completed the form.

## Registration

Now it's time to register your template image in Frame. See how to do this in our [Cloud Accounts &gt; Template Images](https://docs.difr.com/link/45#bkmrk-add-a-template-image) guide.

# BYO Images on IBM Cloud

This document will provide you with instructions on how to prepare and register your own template image in IBM Cloud for use with Frame. Before moving forward with the preparation procedure, please ensure you have read through the general requirements and considerations on the [Windows BYO image](https://docs.difr.com/books/platform-administrators-guide/page/windows) page. We will outline additional details specific to IBM Cloud public cloud below.

## Considerations

Customers planning to use their own OS image (Windows 10, Windows 11, Windows Server 2019, or Windows Server 2022) can bring their own (BYO) template image by starting the process in one of two ways:

1. An IBM Cloud-provided OS image (e.g., Windows Server 2019 or Windows Server 2022). This approach is the simplest as the IBM Cloud-provided OS image already has the required IBM Cloud drivers.
2. A Microsoft-provided Windows 10, Windows 11, Windows Server 2019, or Windows Server 2022 image. This approach requires installation of IBM Cloud-required drivers in the image before uploading the image to IBM Cloud. Additionally, customers will need to verify that the image will operate correctly in IBM Cloud.

Administrators must also be aware of the following considerations:

- Windows 10 Enterprise multi-session images are not supported.
- IBM Cloud Generation 2 and 3 VMs are supported. However, Windows 10/11 requires Generation 3 VMs due to the requirement for UEFI.

## IBM Cloud-provided OS Images

This procedure describes how to prepare your template OS image based on an IBM Cloud-provided OS image. When configuring your image, you must use a Windows OS user account with local Windows administrator privileges.

1. Log in to https://cloud.ibm.com/ and under **VPC Infrastructure**, open **Virtual server instances**.
2. Click on **Create +** option to create a new virtual machine.
    
    <figure>![IBM Cloud - Virtual Server Instance List](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server1.png)
    
    <figcaption>  
    </figcaption></figure>
3. Select desired location, specify a name for the virtual server, select desired resource group, and for the image family, select "ibm-windows-server-2019-full-standard-amd64-18" or "ibm-windows-server-2022-full-standard-amd64-12". Choose the profile. In the example below, the Balanced | bx3d-2x10 profile was selected.
    
    <figure>![IBM Cloud - Create Virtual Server Instance](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server2.png)
    
    <figcaption>  
    </figcaption></figure>
4. Add one or more SSH keys to your instance. If you already have SSH key, you can use your existing key or you can create new key. In case you are creating a new SSH key, please note that the key is generated in .prv format and will be saved to your local machine. You will need that key to authenticate to the virtual server via RDP.
    
    <figure>![IBM Cloud - Create SSH Key](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server-ssh.png)
    
    <figcaption>  
    </figcaption></figure>
5. Setup Networking and Enable Metadata. You can create a new VPC or choose an existing VPC to put this virtual server. Enable the Metadata slider for the [Frame Agent Setup Tool (FAST)](https://docs.difr.com/books/platform-administrators-guide/page/frame-agent-setup-tool-fast) to execute properly.
    
    <figure>![IBM Cloud - Configure Networking](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server3.png)
    
    <figcaption>  
    </figcaption></figure>
6. Click on **Create virtual machine** to finalize VM creation.
7. You will now need to RDP into your VM in order to install the Frame Agent, optimize the image, and execute Microsoft sysprep.
    
    a. RDP into your virtual server. If an RDP connection is unsuccessful, verify that you have enabled `tcp/3389` and `udp/3389`. Select your virtual server and under “Network attachments with Virtual network interface”, click on **Security group**. You should be able to view the security group configuration page for your virtual server. Click on **Manage rules**.
    
    <figure>![IBM Cloud - Configure Security Group](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server4.png)
    
    <figcaption>  
    </figcaption></figure>b. Enable the RDP protocol (`port 3389`) by creating an inbound rule.
    
    <figure>![IBM Cloud - Enable RDP](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server5.png)
    
    <figcaption>  
    </figcaption></figure>c. If you do not have a network route to your virtual server (i.e., S2S/P2S VPN), you will need to attach a Floating IP address to your virtual network interface. To assign a Floating IP, open the Virtual network interface under “Network attachments with Virtual network interface” and under Floating IPs, click on **Attach +** option to add existing or to create new Floating IP.
    
    <figure>![IBM Cloud - Configure Virtual Network Interface](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server6.png)
    
    <figcaption>  
    </figcaption></figure><figure>![IBM Cloud - Add Floating IP Address](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server7.png)
    
    <figcaption>  
    </figcaption></figure>d. Open Remote Desktop Connection from your PC and specify the IP address of your VM. Username for the RDP connection will be "Administrator" and the password needs to be extracted from .prv SSH key that you obtained during VM creation. To extract the Administrator password:
    
    
    - Download [OpenSSL](https://www.openssl.org/source/)
    - Copy the file containing the private key (.prv format) to a folder with openssl.exe and run command:
        
        ```cmd
        .\openssl.exe rsa -in .\key.prv -out keypem.pem 
        
        ```
    - Open `keypem.pem` in Notepad.
    - Under your user persona in the upper right-hand corner of the IBM Cloud Portal, click on **Log in to IBM CLI and API**.

To use IBM Cloud CLI and API, you will need to install the latest version of the stand-alone IBM Cloud Command Line Interface and the plugin by following the IBM documentation:

```
    - [Getting started with the IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-getting-started)
    
    - [VPC CLI reference](https://cloud.ibm.com/docs/cli?topic=cli-vpc-reference)

  :::

```

<figure id="bkmrk-">![IBM Cloud - Log in to IBM CLI and API](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server8.png)

<figcaption>  
</figcaption></figure>```
  - Run the following command: 

     ```cmd
     ibmcloud is instance-initialization-values <virtual server instance id> --private-key "<private key>" 
     ```

  where `<virtual server instance id>` is the value listed in the Virtual server instance page and `<private key>` is copied from the keypem.pem file you opened in notepad.exe.

```

<figure id="bkmrk--1">![IBM Cloud - Example Configuration of SSH Key](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-server9.png)

<figcaption>  
</figcaption></figure>e. From your Remote Desktop Connection UI, enter your username (`Administrator`) and password (private key) and RDP into the virtual server.

Now that you have a template image VM accessible via RDP, you can proceed with the installation of the Frame agent and drivers.

## Microsoft-provided OS Images

This procedure describes how to prepare your template OS image based on a Microsoft-provided OS image. In this scenario, you are bringing your own OS image and licensing.

With IBM Cloud, this scenario is particularly relevant if you wish to use Windows 10 or Windows 11 for the template OS image, as these Microsoft Client operating system images are not available from IBM Cloud. When configuring your image, you must use a Windows OS user account with local Windows administrator privileges.

### Create Windows OS Image

<p class="callout info"> This procedure requires use of a third-party tool Oracle VirtualBox to prepare a Microsoft-provided or third-party-provided OS image for use in IBM Cloud. This document is derived from the [IBM Cloud Creating a custom Windows image](https://cloud.ibm.com/docs/vpc?topic=vpc-create-windows-custom-image) page.</p>

1. Download the Oracle VirtualBox installer from the [VirtualBox website](https://www.virtualbox.org/wiki/Downloads) and install on a local machine.
2. Download the QEMU disk image utility from [https://cloudbase.it/qemu-img-windows/](https://cloudbase.it/qemu-img-windows/) (download binaries using the link at the bottom of the web page). Extract the tool on the same local machine. Run the following command, as a Windows administrator, from the Windows command line to prepare a virtual hard drive (.vhd):
    
    ```cmd
    qemu-img.exe create -f vpc <filename>.vhd <file size> 
    
    ```
    
    where `<filename>` is the filename for the virtual hard disk and `<file size>` is the image size (e.g, 65G or 100G)

<p class="callout info"> For Windows 11 operating system, the minimum virtual hard disk size is 64 GB.</p>

3. Download the Microsoft-provided disk image (ISO) file for the desired operating system (e.g., [https://www.microsoft.com/en-us/software-download/windows11](https://www.microsoft.com/en-us/software-download/windows11)).
4. Download the VirtIO drivers for Windows:
    
    
    - For IBM Cloud VPC, IBM Cloud discusses their recommended procedure to obtain the wirtio-win drivers at Step 3 of their [Creating a Windows custom image](https://cloud.ibm.com/docs/vpc?topic=vpc-create-windows-custom-image#create-win-custom-image-first-steps) documentation page.
    - Alternatively, you may obtain the virtio-win driver from other sources, such as from the Fedora Project (https://github.com/virtio-win/virtio-win-pkg-scripts/blob/master/README.md).
5. Open Oracle VirtualBox and create new virtual machine.
    
    a. Click on the **New** button.
    
    <figure>![VirtualBox - New Virtual Machine](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox1.png)
    
    <figcaption>  
    </figcaption></figure>b. Specify a name for your VM, choose the .iso file for the image, and select either the Pro or Enterprise. Check the option "Skip Unattended Installation" and click on **Next**.
    
    <figure>![VirtualBox - Specify VM Name and Operating System](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox2.png)
    
    <figcaption>  
    </figcaption></figure>c. Select the virtual hardware configuration of the virtual machine that will prepare the image for use in IBM Cloud. If you are creating a Windows 11 OS image, you must ensure that the Enable EFI checkbox is selected.
    
    <figure>![VirtualBox - Specify Hardware](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox3.png)
    
    <figcaption>  
    </figcaption></figure>d. Next, add the Virtual Hard Drive (.vhd) that was created using the QEMU disk image utility by selecting the option "Use an Existing Virtual Hard Disk File", find the .vhd file, and select that file.
    
    <figure>![VirtualBox - Specify Virtual Hard Disk](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox4.png)
    
    <figcaption>  
    </figcaption></figure>e. Click **Finish** to complete the VM creation process.
    
    <figure>![VirtualBox - Create the VM](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox5.png)
    
    <figcaption>  
    </figcaption></figure>f. Select newly created VM and select Settings. Click on Storage and add virtio-scsi controller.
    
    <figure>![VirtualBox - Add the virtio-scsi Controller](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox6.png)
    
    <figcaption>  
    </figcaption></figure><figure>![VirtualBox - Virtio-scsi Controller Added](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox7.png)
    
    <figcaption>  
    </figcaption></figure>g. Left click the Windows OS .vhd disk and drag and drop the disk on the virtio-scsi controller. Click **OK** to continue.
    
    <figure>![VirtualBox - Associate VHD with SCSI Controller](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox8.png)
    
    <figcaption>  
    </figcaption></figure><figure>![VirtualBox - VHD Attached to SCSI Controller](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtualbox9.png)
    
    <figcaption>  
    </figcaption></figure>

### Windows Out of Box Experience (OOBE)

<p class="callout info"> The following section only highlights the relevant steps of the Windows Out of Box Experience (OOBE).</p>

1. Start the VM and go through the operating system installation process. Press any key to boot from .vhd and go through the OOBE workflow.
    
    <figure>![VirtualBox - Boot VM](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe1.png)
    
    <figcaption>  
    </figcaption></figure>
2. Choose the Windows OS Version.
    
    <figure>![VirtualBox - Select Windows OS Edition](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe2.png)
    
    <figcaption>  
    </figcaption></figure>
3. Accept licensing and when you reach the "Which type of installation do you want?" screen, select the **Custom: Install Windows only (advanced)** option.
    
    <figure>![VirtualBox - Installation Type](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe3.png)
    
    <figcaption>  
    </figcaption></figure>
4. Go back to Oracle VirtualBox, select your VM, open Settings, select Storage, and mount a CD-ROM.
    
    <figure>![VirtualBox - Mount CD-ROM](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe4.png)
    
    <figcaption>  
    </figcaption></figure>
5. Select the Virtio ISO and click **Choose**.
    
    <figure>![VirtualBox - Select Virtio ISO](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe5.png)
    
    <figcaption>  
    </figcaption></figure>
6. The virtio-win ISO should now be listed under the "Controller: SATA". Click **OK** to continue.
    
    <figure>![VirtualBox - Virtio and Windows OS ISOs](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe6.png)
    
    <figcaption>  
    </figcaption></figure>
7. Go back to the Windows installation window and click on **Load drivers**, browse and select virtio, amd64, and then win 11. If you are installing Windows 10, select the same folder. Click **OK** to continue.
    
    <figure>![VirtualBox - Select Virtio Driver Location](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe7.png)
    
    <figcaption>  
    </figcaption></figure><figure>![VirtualBox - Select Driver to Install](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe8.png)
    
    <figcaption>  
    </figcaption></figure>
8. Select the newly added disk where you will install your Windows OS and click **Next**.
    
    <figure>![VirtualBox - Select Disk to Install OS](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-oobe9.png)
    
    <figcaption>  
    </figcaption></figure>
9. After this step, Windows installation will start. Once the Windows installation is complete, you will have to go through the Windows Out of Box Experience (OOBE) by customizing Region, Language, Keyboard(s), etc. Do not sign in into your online user account. Create a local Windows administrator account and save the username and the password. You will need this local Windows administrator account next.

### Configure Windows OS

1. Once the OOBE is done, power on the VM and login using your local Windows administrator account.
2. Install the virtio drivers. The virtio ISO should still be mounted on your VM. Go to File Explorer, open the CD-ROM Drive with virtio ISO.
    
    <figure>![Open CD-ROM](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtio1.png)
    
    <figcaption>  
    </figcaption></figure>
3. Start virtio-win-guest-tools.exe application and follow the wizard without any changes.
    
    <figure>![Installing Virtio](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-virtio2.png)
    
    <figcaption>  
    </figcaption></figure>
4. Open the browser and go to [Customizing a virtual server](https://cloud.ibm.com/docs/vpc?topic=vpc-create-windows-custom-image#customize-virtual-machine) and follow steps 1, 2 and 3 **only**.
    
    a. Download and install Cloudbase-Init.
    
    b. Modify the `cloudbase-init.conf` and `cloudbase-init-unattend.conf` configuration files as explained in the IBM Cloud documentation page. Please be careful as any mistake in modifying the configuration file will result in problems when configuring your image.
5. Next, remove the Windows recovery partition on VM as you may need to extend the disk to increase disk capacity in the future. If the recovery partition exists, follow the steps to remove the recovery partition.
    
    <figure>![Disk Management - Recovery Partition](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition1.png)
    
    <figcaption>  
    </figcaption></figure>
6. Open Windows cmd.exe as administrator and type `reagentc /info`
    
    <figure>![Disk Management - reagentc](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition2.png)
    
    <figcaption>  
    </figcaption></figure>
7. Next, enter `reagentc /disable` to lock the agent and allow removal of recovery partition.
    
    <figure>![Disk Management - reagentc /disable](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition3.png)
    
    <figcaption>  
    </figcaption></figure>
8. Then execute:
    
    ```cmd
    diskpart
    list disk
    select disk 0
    list partition
    
    ```
    
    In the example below, the recovery partition is partition #4.
    
    <figure>![Diskpart - List Partition](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition4.png)
    
    <figcaption>  
    </figcaption></figure>
9. Once you have confirmed the partition number for the recovery partition, execute the following commands. If there is no recovery partition, then exit Diskpart and continue.
    
    ```
    select partition <number>
    delete partition override
    
    ```
    
    where `<number>` is the recovery disk partition. You may chose to execute `list partition` to confirm that the recovery partition was successfully removed.
    
    <figure>![Diskpart - Delete Recovery Partition](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition5.png)
    
    <figcaption>  
    </figcaption></figure>
10. On the Windows command line, enter `reagentc /enable`.
11. Get back to Disk Management and extend C partition by right clicking on (C:) and Extend Volume...

<figure id="bkmrk--2">![Disk Management - Initiate Extend Volume](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition6.png)

<figcaption>  
</figcaption></figure><figure id="bkmrk--3">![Disk Management - Extend Volume Complete](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition7.png)

<figcaption>  
</figcaption></figure>12. Shutdown the virtual machine.
13. Confirm the location of the .vhd file on your local machine in preparation for uploading the file to IBM Cloud.

<figure id="bkmrk--4">![Disk Management - Confirm .vhd File Location](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-partition8.png)

<figcaption>  
</figcaption></figure>14. Upload the virtual hard drive into IBM Cloud. Login to https://cloud.ibm.com/ and create new Object Storage in Standard tier and the bucket.

<figure id="bkmrk--5">![IBM Cloud - Create Object Storage](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-cos1.png)

<figcaption>  
</figcaption></figure><figure id="bkmrk--6">![IBM Cloud - Create Bucket](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-cos2.png)

<figcaption>  
</figcaption></figure>15. Using Aspera, upload the .vhd file.

<p class="callout info"> You will need to install extension and client for Aspera as the .vhd file is larger than 200 MB. Follow the instructions from the IBM Cloud Portal.</p>

<figure id="bkmrk--7">![IBM Cloud - Upload Image](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-cos3.png)

<figcaption>  
</figcaption></figure>16. Next, you need to [grant the VPC infrastructure read/write access](https://cloud.ibm.com/docs/vpc?topic=vpc-object-storage-prereq&interface=ui) to the object storage containing the .vhd file. Configure this authorization by going to Manage – Access (IAM) and opening the Authorizations section and creating new authorization.

<figure id="bkmrk--8">![IBM Cloud - Cloud Object Storage](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ibm-cos4.png)

<figcaption>  
</figcaption></figure>17. Now it is time to create the IBM Image from the .vhd file. Under VPC Infrastructure, locate and click on Images and then **Create +**.

a. Specify the Geography, Region, Name, and Resource group.

b. For Image source, select `Cloud Object Storage` and pick the Cloud Object Storage instance, Location, and Bucket where your uploaded image file is located.

c. Select the image file that will be used to create the custom image.

d. Select the Operating system. For Windows 10 or 11, use `Windows Server` and the Version should be `windows-2019-amd64-byol`.

e. Click the **Create custom image** button to create the custom image.

18. Once the custom image is created, you will create the virtual server instance using that custom image. Go to VPC Infrastructure and then the Virtual server instances for VPC page. Click on **Create +**.

a. Choose your desired Location (Geography, Region, and Zone) for your virtual server instance.

b. Give the virtual server instance a name and choose the Resource Group in which you want to deploy this instance in.

c. In the Image section, click on Change image, go to Custom images tab, select your custom image, and click **Save**.

d. Choose a profile.

e. Configure the SSH key and networking. Please make sure that RDP port 3389 is opened by the security group.

f. Enable **Metadata** and **Secure access** – this step is mandatory for FAST installer to work.

g. Click the **Create virtual server** button.

<p class="callout info"> If you don’t have VPN S2S or P2S connection to your IBM infrastructure, please assign Floating IP Address to your instance so you can access it over public internet.</p>

19. Once your Windows virtual server instance has booted, RDP into your virtual instance. Use the local administrator username and password that you set during VM creation on Oracle VirtualBox during OOBE procedure.

Now that you have a template image VM accessible via RDP, you can proceed with the installation of the Frame agent and drivers.

## Install Frame Agent and Drivers

1. Use RDP to connect into your VM. Follow the [Installation](https://docs.difr.com/link/73#bkmrk-installation) and [Usage](https://docs.difr.com/link/73#bkmrk-usage) instructions to download the Frame Agent Setup Tool (FAST) and install the Frame Agent, drivers, and tools in your template image VM.
2. Once FAST has successfully installed the Frame Agent, drivers, and tools, reboot the VM to complete the installation of the Frame Agent. Use RDP to connect back into your VM.
    
    <p class="callout info"> For additional installation scenarios (e.g., proxy server configuration, command line arguments, review our [Frame Agent Setup Tool](https://docs.difr.com/books/platform-administrators-guide/page/frame-agent-setup-tool-fast) documentation.</p>
3. **(Optional)**: If a proxy server is required for all outbound traffic to the Internet from your private network, you will need to configure Frame Guest Agent to use your proxy server. Refer to our [FGA Proxy Helper Tool](https://docs.difr.com/books/platform-administrators-guide/page/google-cloud-platform/windows/frame-agent-setup-tool/#fga-proxy-helper-tool) documentation page for further details.
4. **(Optional)**: If you plan to use NVIDIA GPU-based instance types in IBM, make sure you install the appropriate [NVIDIA](https://www.nvidia.com/en-us/drivers/) GPU drivers in your template image VM. Also, please check with your IBM support representative about the license for using this GPU in WDDM.  
    We currently don't have AMD-supported instance types. If you wish to use those, please contact support.
    
      
    Example for Nvidia:
    
    [![Screenshot 2026-02-24 at 10.17.07.png](https://docs.difr.com/uploads/images/gallery/2026-02/scaled-1680-/0N2screenshot-2026-02-24-at-10-17-07.png)](https://docs.difr.com/uploads/images/gallery/2026-02/0N2screenshot-2026-02-24-at-10-17-07.png)
5. **(Optional)**: Install your applications and finish image customization.
    
    
    6. Once you have configured the image as desired, launch the Sysprep Helper tool.  
          
        \- Select Accept all prompts during Sysprep  
        \- change power option from quiet to shutdown  
        \- Click on "**Test Sysprep"** to start the process  
          
        After the sysprep process finished successfully the vm will be powered of automatically.
        
        [![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/gUiimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/gUiimage.png)
6. If the VM does not shutdown, then there was a problem with sysprep. Review the sysprep logs in `%WINDIR%\System32\Sysprep\Panther` to determine the source of the error.
    
    <figure style="max-width: 700px;">![Windows - Sysprep Log Path](https://docs.difr.com/uploads/images/gallery/2025-10/sysprep-logs.png)
    
    <figcaption>  
    </figcaption></figure>
7. When sysprep is successful, the VM will automatically power off. Verify that the VM has stopped in AWS Console.

## Tag the IBM Cloud Machine Image

1. Create an image from your IBM Cloud instance.
2. Once the image is created, navigate to the list of images in the IBM Cloud console. Click on the image you created in the previous step and assign a tag with the Key name `framerole` and value `masterimage` to the image.

Voilà! You have successfully created a template image to be registered in Frame for use to create your Frame workloads. You may prepare additional template images (e.g., different Windows OS versions, template images with different sets of applications) by simply repeating the procedure with a new image.

## Registration

Now it's time to register your template image in Frame. See how to do this in our [Cloud Accounts &gt; Template Images](https://docs.difr.com/link/45#bkmrk-add-a-template-image) guide.

# BYO Images on Nutanix AHV

This document will provide you with instructions on how to prepare and register your own Windows OS template image in AHV for use with Frame. Before moving forward with the preparation procedure, please ensure you have read through the general requirements on the [BYO image](https://docs.difr.com/link/69#bkmrk-page-title) and considerations on the [Windows BYO image](https://docs.difr.com/link/71#bkmrk-page-title) pages. We will outline additional details specific to Nutanix AHV below.

You must create and register at least one template or "gold" image when registering your AHV cluster to have an AHV Cloud Account in Frame. This template image will be used to create the Frame Sandbox and Utility Server(s) (optional) when you create a Frame account.

Additional template images can be created and [registered](https://docs.difr.com/link/45#bkmrk-add-a-template-image) after the AHV Cloud Account is created.

## Considerations

When preparing to create a Windows 10 or Windows 11 OS image, you must consider the following:

- Do not install **Nutanix Guest Tools** in your template image. **Nutanix Guest Tools** can cause communication issues between the workload instances and the Frame control plane.
- If your image already has **Nutanix Guest Tools** installed, you must install **VirtIO** drivers before uninstalling Nutanix Guest Tools. If you attempt to remove Nutanix Guest Tools without first installing VirtIO drivers, your virtual machine will not boot.
- Use **SATA** as the interface for CD-ROM and SCSI for disk drives when creating a VM in Prism Central or Prism Element. Do not use IDE as the interface for CD-ROM or disk drives. This is mandatory for BYO Windows 11 with vTPM images.
- Do not use volume groups disks.
- Set your template image timezone to **UTC**. When users start a Frame session, the workload VM will be set, by default, to the correct timezone based on the user's browser locale.
- When setting up the template image, it can be useful to have the Windows Firewall disabled. Firewall can be customized and re-enabled later in the Sandbox for a Frame account. To do so, run the following command in Powershell.
    
    ```
    Set-NetFirewallProfile -Profile Domain, Public, Private -Enabled False
    ```
    
    If you do not wish to disable Windows Firewall but still want to enable RDP, run the following command in PowerShell.
    
    ```
    Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
    ```
- Enable Microsoft RDP in your template image before installing the Frame Guest Agent to access the template image VM. Verify you can access your template image using RDP with your local Windows administrator user. Ensure RDP is allowed in the Windows Firewall for your template image.

## Preparation

1. First, starting with a Windows 10, Windows 11, Windows Server 2019, or Windows Server 2022 image, create a VM in the AHV cluster you are going to use for Frame. When configuring your image, you must use a Windows OS user account with local Windows administrator privileges. If you are bringing a Windows 11 image with vTPM, review and complete the required tasks following the [Windows 11 with vTPM section](https://docs.difr.com/link/77#bkmrk-windows-11-vtpm-supp) of this guide, before continuing with Step 2.
2. Use RDP to connect into your VM. Follow the [Installation](https://docs.difr.com/link/73#bkmrk-installation) and [Usage](https://docs.difr.com/link/73#bkmrk-usage) instructions to download the Frame Agent Setup Tool (FAST) and install the Frame Agent, drivers, and tools in your template image VM.
3. Once FAST has successfully installed the Frame Agent, drivers, and tools, reboot the VM to complete the installation of the Frame Agent. Use RDP to connect back into your VM.

For additional installation scenarios (e.g., proxy server configuration, command line arguments, review our [Frame Agent Setup Tool](https://docs.difr.com/link/73#bkmrk-page-title) documentation.

4. **(Optional)**: If a proxy server is required for all outbound traffic to the Internet from your private network, you will need to configure Frame Guest Agent to use your proxy server. Refer to our [FGA Proxy Helper Tool](https://docs.difr.com/link/73#bkmrk-fga-proxy-helper-too) documentation page for further details.
5. **(Optional)**: If you plan to use NVIDIA GPU-based instance types on your AHV cluster, you can either install the appropriate NVIDIA GPU drivers in your template image VM (if all of your Frame accounts will use the NVIDIA GPU) or install the NVIDIA GPU drivers in the Frame account Sandbox (if not all Frame accounts will use the NVIDIA GPU). Refer to the requirements in our [BYO AHV Infrastructure](https://docs.difr.com/link/49#bkmrk-page-title) guide.
6. **(Optional)**: Install your applications and finish image customization.
    
    
    6. Once you have configured the image as desired, launch the Sysprep Helper tool.  
          
        \- Select Accept all prompts during Sysprep  
        \- change power option from quiet to shutdown  
        \- Click on "**Test Sysprep"** to start the process  
          
        After the sysprep process finished successfully the vm will be powered of automatically.

<figure id="bkmrk-">[![image.png](https://docs.difr.com/uploads/images/gallery/2025-12/scaled-1680-/bVFimage.png)](https://docs.difr.com/uploads/images/gallery/2025-12/bVFimage.png)

<figcaption>  
</figcaption></figure>8. If the VM does not shutdown, then there was a problem with sysprep. Review the sysprep logs in to determine the source of the error.

<figure id="bkmrk-windows---sysprep-lo">![Windows - Sysprep Log Path](https://docs.difr.com/uploads/images/gallery/2025-10/sysprep-logs.png)

<figcaption>Windows - Sysprep Log Path</figcaption></figure>10. When sysprep is successful, the VM will automatically power off. Verify that the VM has stopped in Prism.

### Tag VM

11. Navigate to the list of VMs in Prism. Click on the VM you created in the previous step, open the "More" drop-down menu, and select "Manage Categories".
12. Put the VM in the `<strong>FrameRole</strong>` category with the value `<strong>MasterTemplate</strong>`
13. Add the category `<strong>FrameGuestAgentKind</strong>` with the value `<strong>fga</strong>`

<p class="callout warning"> Ensure the **MasterTemplate** VM does not get deleted. Otherwise, you will not be able to create Frame accounts using that template image.</p>

Voilà! You have successfully created a template image to be registered in Frame for use to create your Frame workloads. You may prepare additional template images (e.g., different Windows OS versions, template images with different sets of applications) by simply repeating the procedure with a new image.

## Registration

Now it's time to register your template image in Frame. See how to do this in our [Cloud Accounts &gt; Template Images](https://docs.difr.com/link/45#bkmrk-add-a-template-image) guide.

## Windows 11 vTPM Support

For customers who wish to use Windows 11 with Virtual Trusted Platform Module (vTPM), you must first create and enable your template image VM with Secure Boot and vTPM, following the instructions in Nutanix documentation [(AOS 6.6)](https://portal.nutanix.com/page/documents/details?targetId=Nutanix-Security-Guide-v6_6:mul-vtpm-considerations-ahv-r.html) and summarized below.

### Requirements

- Prism Central version pc.2022.9 or above
- AHV version 20220304.242 or above
- AOS version 6.5.1 or above
- VM must use UEFI firmware
- Secure Boot-enabled VM required with minimum Nutanix VirtIO package version of 1.2.1 or higher (for Windows 11 with vTPM)

### Limitations

- You must create a new VM configured for SATA CD-ROMs and disks to use Secure Boot. VMs that use IDE disks or legacy BIOS cannot be converted to use Secure Boot.
- vTPM-enabled VMs cannot be used in a Frame account configured for Disaster Recovery Backup as production domain snapshots are not supported as of AOS version 6.6.

### References

- [Nutanix vTPM Support](https://portal.nutanix.com/page/documents/details?targetId=Nutanix-Security-Guide-v6_6:mul-vtpm-considerations-ahv-r.html)
- [Nutanix UEFI Support for VM](https://portal.nutanix.com/page/documents/details?targetId=AHV-Admin-Guide:vm-vm-uefi-support-c.html)
- [Understanding UEFI, Secure Boot, and TPM in the Virtualized Environment](https://portal.nutanix.com/page/documents/kbs/details?targetId=kA07V000000H3K9SAK)
- [Windows 11 and AHV](https://portal.nutanix.com/page/documents/solutions/details?targetId=TN-2164-Windows-11-on-AHV:TN-2164-Windows-11-on-AHV)

### Procedure

The following instructions are for the scenario where you are installing Windows 11 from a Microsoft Windows 11 ISO and Nutanix VirtIO drivers from a Nutanix ISO:

1. Log in to Prism Element or Prism Central and create a new VM, enabling UEFI and Secure Boot.
2. Connect to any CVM via CLI and run in aCLI:
3. Configuration can be verified by running in aCLI:
    
    You would expect to see an aCLI response like:
    
    <figure>![aCLI - vm.get Response](https://docs.difr.com/uploads/images/gallery/2025-10/byo-image-ahv-vtpm-get-response.png)
    
    </figure>
4. Go back to Prism Element or Prism Central and create and attach two CD-ROM (SATA) drives for the Windows 11 and VirtIO ISOs.
5. Finally, create a sufficiently-sized boot disk that has enough capacity to house the Windows 11 OS plus an additional ~20 GB of free space (45-80GB in total). Disk capacity can be increased later when a Frame account is created using this template image.
6. Power on the VM and run the Windows installer to install Windows 11 on the VM.
7. Return to [Preparation](#preparation) to install the Frame Agent and prepare the VM to be used in Frame.