Using the software in virtual environment

Trellix Application and Change Control might not detect hard drives when using a virtual host due to the type of hardware driver it uses.

Sometimes, virtual system detects hard drives as removable media. Application and Change Control does not solidify removable drives. Follow these steps to allow removable media to be detected correctly.

To enable virtual disk support, change the CustomerConfig value as follows:

To enable this feature on a local system:

Open an Administrative Command Prompt (cmd.exe) using Run as administrator.
Recover the Application Control command line interface (CLI) using sadmin recover.
Enter the CLI password.
Run this command:
```
sadmin config set customerconfig=65690
```
To see the CustomerConfig value, run this command:
```
sadmin config show customerconfig
```
Note
The correct value is: CustomerConfig 65690 (0x1009a).
Lock down the CLI using sadmin lockdown.
Reboot the system.
Attempt to solidify the system using the SC:Enable task or the sadmin so command.

To enable this feature using ePO - On-prem client task:

Make sure the CLI on the client is locked down.
On the ePO - On-prem console, select Menu → Client Tasks → Client Task Catalog.
On the Client Task Catalog page, select Solidcore 8.x.x → SC: Run Commands, and create a task with the value of config set customerconfig=65690.
Run the task.
Reboot the system when the CustomerConfig value change is in effect.
Run the SC: Enable task to solidify the system.

If you are deploying to Virtual Desktop Infrastructure (VDI), the VDI template must have Application Control deployed, configured, and protected in the same way as any endpoint. This protected image must then be used as the VDI template to spawn virtual machines. Once your template is ready, you can launch your VDI image in the protection mode (Enabled mode).

Recommended steps to create a VDI template for any software:

Create your virtual machine.
Install BASE operating system and applications.
Apply operating system updates.
Install Trellix Agent and place in VDI mode.
Install Application Control.
Solidify and place system in update mode.
Create the template.

When you deploy the system, have it check in to ePO - On-prem as it gets a new GUID for Trellix Agent and then it can run the task to lock down and protect.