Skip to main content

Building USAF SDC with Schweitzer Software

SDC Image Installation​

note

NEVER CONNECT THE SDC COMPUTER TO THE INTERNNET

  1. Navigate to https://ceds.gunter.af.mil/AISHome.aspx?AIS=51
    1. Download all 'A20231013 - SDC-11.2209.1-x64-WPLD' files:
      • Media-SDC-11.2209-X64-Deploy.part01-ISO.iso
      • Media-SDC-11.2209-X64-Deploy.part02.rar
      • Media-SDC-11.2209-X64-Deploy.part03.rar
      • Media-SDC-11.2209-X64-Deploy.part04.rar
      • Media-SDC-11.2209-X64-Deploy.part05.rar
      • Media-SDC-11.2209-X64-Deploy.part06.rar
      • Media-SDC-11.2209-X64-Deploy.part07.rar
      • Media-SDC-11.2209-X64-Deploy.part08.rar
      • Media-SDC-11.2209-X64-Deploy.part09.rar
      • SDC-11.2209-x64 Filehashes.txt
      • SDC Readme Media Creation Guide.pdf
  2. Follow the instructions in 'SDC-11.2209-x64 Filehashes.txt' to verify the integrity of the downloaded files.
  3. Follow the instructions in 'SDC Readme Media Creation Guide.pdf' to recompile the downloaded files into a single ~45-48GB file, 'Media-SDC-11.2209-X64-Deploy.iso.' This document will also provide guidance on the creation of bootable media.
  4. Press 'F10' or similar to enter the boot menu and select the device which contains the bootable 'Media-SDC-11.2209-X64-Deploy.iso' files.
  5. Windows Deployment Wizard
    1. Computer Details
      • Computer Name:
      • Join a workgroup:
      • Next.
    2. Locale and Time
      • Language to install: English (United States)
      • Time and currency format (locale): English (United States)
      • Keyboard layout: United States - English
      • ime zone: (UTC+10:00) Guam, Port Moresby
      • Next.
    3. Custom Admin Password
  6. SDC Build Selection: NIPR, Wipe and Load

Group Policy​

  1. Open Group Policy editor
> gpedit
  • Local Computer Policy
    • Administrative Templates

      • NetBanner

        note

        Ensures a classification marking is displayed on the desktop.

        • Classification
          1. Enabled
          2. Classification: Unclassified
          3. Apply
          4. OK

      • Windows Components

        • File Explorer

          note

          Adds a protection layer against malicious downloads and applications.

          • Configure Windows Defender SmartScreen
            1. Warn
            2. Apply
            3. OK

      • System

        note

        Protects the system from unauthorized data transfer.

        • Removable Storage Access
          • Removable Disks: Deny execute access
            1. Enabled
            2. Apply
            3. OK
          • Removable Disks: Deny read access
            1. Enabled
            2. Apply
            3. OK
          • Removable Disks: Deny write access
            1. Enabled
            2. Apply
            3. OK
    • Windows Settings
      • Security Settings

        • Security Options

          note

          Allows broader use of modern encryption/hashing methods.

          • System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing
            1. Disabled
            2. Apply
            3. OK
  1. Search for command prompt and run as administrator by right clicking program
note

Forces immediate application of the new Group Policy settings.

> gpupdate /force
note

Creates a new local user account with the specified username and password.

> net user /add usernamegoeshere passwordgoeshere

Download and Install Third-party Drivers and Software​

Download Third-party Drivers and Software​

  1. Navigate to https://selinc.com/products/usb-serial/support/
    • Download latest version of 'SEL USB Driver' for SEL-C662 on Windows 11
  2. Navigate to https://selinc.com/products/5030/support/#tab-downloads
    • Download latest version of 'acSELerator QuickSet SEL-5030 Software'
  3. Navigate to https://selinc.com/products/5033/support/#tab-downloads
    • Download latest version of 'acSELerator RTAC SEL-5033 Software'
  4. Navigate to https://www.se.com/us/en/download/document/ION_Setup_Latest_Release/
    • Download latest version of 'PowerLogic ION Setup software'
  5. Navigate to https://www.easypower.com/products/releases/easypower-11.0
    • Download latest version of 'EasyPower software'
  6. Unzip/Extract any downloaded archives.

Install Third-party Drivers and Software​

  1. Install 'SEL USB Driver' for SEL-C662 on Windows 11
    1. Navigate to <your path here>\c662 Drivers\Windows-11\SEL CP210x USB to UART Bridge Driver
      • For example: "C:\Users\USAF_Admin\Downloads\c662 Drivers\Windows-11\SEL CP210x USB to UART Bridge Driver"
    2. Right-click selvcp.inf and select 'Install'
    3. Select 'Open' on the Security Warning
    4. Select 'Yes' on UAC
    5. Click 'OK'
  2. Install 'acSELerator QuickSet SEL-5030 Software'
    1. Navigate to the Setup.exe and double click it
    2. Select 'Run' on SmartScreen
    3. Select 'Yes' on UAC
    4. Select 'Yes' on QuickSet Installer version #.#.#.#
    5. Select 'OK' on SEL Install Selection
    6. Select 'I Agree' on License Agreement
    7. Select 'I Agree' on Export Regulations
    8. Enter and verify the AcSELerator Database backup file password, then select 'OK'
    9. Select 'OK' on Select AcSELerator QuickSet Drivers
    10. When closing AcSELerator QuickSet for the first time the 'Select AcSELerator QuickSet Plugins' will appear
      1. Select all plugins
      2. Select 'OK'
      3. Select 'Close'
  3. Install 'acSELerator RTAC SEL-5033 Software'
    1. Navigate to the RTACSetup.exe and double click it
    2. Select 'Run' on SmartScreen
    3. Select 'Yes' on UAC
    4. Select 'Next' on AcSELerator RTAC Setup
    5. Select 'I Agree' on License Agreement
    6. Select 'Next' on Choose Components
    7. Select 'Next' on Choose Directories
    8. Select 'Install' on Create Shortcuts
    9. Select 'Finish' on Completing AcSELerator RTAC Setup
  4. Install 'PowerLogic ION Setup software'
    1. Navigate to the 'IONSetup v#.######.##.exe' and double click it
    2. Select 'Run' on SmartScreen
    3. Select 'Yes' on UAC
    4. Select 'I Agree' on License Agreement
    5. Select 'Next' on Install ION Setup for All Users
    6. Enter User Name and Company Name, then Select 'Next' on User Information
    7. Select 'Next' on File Destination, then select 'Yes' to create the folder
    8. Select 'Next' on Check System
    9. Select 'Install' on Ready to Configure
    10. Select 'Next' on Configuration Complete
    11. Select 'Close' on Complete
  5. Install 'EasyPower software'
    1. Navigate to the 'EasyPowerSetup ##.#.#.####.exe' double click it
    2. Select 'Run' on SmartScreen
    3. Select 'Yes' on UAC
    4. Select 'Install' on EasyPower ##.# - InstallShield Wizard
    5. Select 'Next' on Welcome screen
    6. Select 'I accept and agree to the terms in the license agreement' and then 'Next'
    7. Select 'Typical' setup type
    8. Select 'Next' on Destination Folder
    9. Select 'Install' on Ready to Install the Program
    10. Select 'Finish' on Install Completed

Disable Unused Startup Apps​

  1. Task Manager
    • Startup apps
      • Disable OneDrive
      • Disable Teams
      • Disable Teams Update

Disable Wireless​

note

Secure the system by eliminating wireless communication capabilities at the hardware level, thereby enforcing compliance, reducing the risk of data leaks, and ensuring the device operates only within approved, controlled network environments.

  1. Press 'F2' or similar during boot up to enter the BIOS settings
    • Settings
      • Wireless
        • Wireless Switch
          • Uncheck/Disable all, select 'Apply', then select 'OK'
        • Wireless Device Disable
          • Uncheck/Disable all, select 'Apply', then select 'OK'
    • Select 'Exit'

Updates and Patches​

note

It is recommended to apply patches at least once per quarter and perform a full system reimage annually.

  1. Navigate to https://dodecpr.csd.disa.mil to download updates