# How to set up your Windows device for CERN use Please navigate this guide as following: - On non-touchscreen devices, using either the arrows on your keyboard or the ones on the bottom-right corner of the screen. - On touchscreen devices, swiping from right to left for going through each slide. --- ## Stages - Initial Windows setup Common for all management models. - [Choosing your management model](#/management-models) - [CERN Managed](#/cern-managed) - [Join CERN domain](#/join-cern-domain) - [Self Managed](#/self-managed) --- <style> section { padding-top: 0 !important; } p, img { margin-top: 0 !important; } img { max-width: 800px !important; } p, li { font-size: 30px !important; } .footer { display: none; } </style> Choose your preferred region. This will affect how date and time are shown, the starting day of the week, etc. ![Region](https://codimd.web.cern.ch/uploads/upload_db04a9b09070e5ed3dd49d60c1e4926f.png) --- Choose your primary keyboard layout. This is normally the one of your physical keyboard. ![Input Layout](https://codimd.web.cern.ch/uploads/upload_5fd739446bc66ba10c1561771bff83e4.png) --- Optionally, you can add a secondary keyboard layout, for example for having a combination of English and French layouts. ![Optional Second Layout](https://codimd.web.cern.ch/uploads/upload_a2b51c25798e7d50c38de4fb3e939f21.png) --- Connect to the CERN network to register your device. ![Network Connection](https://codimd.web.cern.ch/uploads/upload_d871a844e58a9e418ff2403d896bb7e0.png) --- The Network Registration page will appear, read and agree to the CERN Computing Rules. ![Network Database Registration 1](https://codimd.web.cern.ch/uploads/upload_2ccd31f323f42685760c69c46635e88e.png) --- Click on the `Sign in` button to be redirected to CERN Single Sign-On. ![Network Database Registration 2](https://codimd.web.cern.ch/uploads/upload_d27988dc3f823cefb0a37df300be1eee.png) --- Provide your CERN account credentials and click `Sign In`. ![Network Database Registration 3](https://codimd.web.cern.ch/uploads/upload_aeb415c751e65ab5d996e990445f6b27.png) --- Click on the `Create` button under the *New Device* section. ![Network Database Registration 4](https://codimd.web.cern.ch/uploads/upload_a0bc56bd83f079673240f1cd73873583.png) --- If this device was bought from CERN, choose `Professional Device`. **Note down** and type a name for your device. The network (MAC) address should be automatically filled, otherwise it should be written on a sticker attached to your new device. ![Network Database Registration 5](https://codimd.web.cern.ch/uploads/upload_710189a292e11d68d15d1f3934ecf624.png) --- Your name should be filled in automatically, making you the responsible and administrator of the device. Please provide it yourself otherwise, and type the Operating System as `WINDOWS DESKTOP` and Version as `11`. ![Network Database Registration 6](https://codimd.web.cern.ch/uploads/upload_29c7da30a25821d139362c7609fe1b7d.png) --- Confirm the details you have entered by clicking on `Register` ![Network Database Registration 7](https://codimd.web.cern.ch/uploads/upload_3502af85acec5ca93941b69e519ef0fb.png) --- Please wait until your device is fully registered, which may take a couple of minutes. ![Network Database Registration 8](https://codimd.web.cern.ch/uploads/upload_c7cea2425ed1bccd29e172c126a2ef05.png) --- Once you see the registration complete message, please click on the `X` button in the top right corner. ![](https://codimd.web.cern.ch/uploads/upload_2480aafde870c938db498c2dc5697b43.png) --- You will then be taken back to the network connection step. Please click on `Disconnect`, then `Connect` back to the CERN network. ![](https://codimd.web.cern.ch/uploads/upload_6a5f4b4ea96f9679f62d90bad1496a3f.png) --- This time, the status of the connection will be `Connected` instead of `Action needed, no internet`. Otherwise, please retry reconnecting or restart your device. ![](https://codimd.web.cern.ch/uploads/upload_d583d8a43183acbfb89e0196bb624298.png) --- Please wait for the latest updates to be installed on your machine, after which your device may restart. ![](https://codimd.web.cern.ch/uploads/upload_e7f5b2cda60755df225adbbdfb4b289e.png) --- You need to read and agree to the Microsoft License Agreement. ![](https://codimd.web.cern.ch/uploads/upload_c619abc05d5c3b9b9752da30c4ec6ad6.png) --- Type a name for your device, ideally the same that you previously noted down during the network registration. ![](https://codimd.web.cern.ch/uploads/upload_cf81e8dd9245b2476549525934d2f3f6.png) --- Choose `Setup for personal use`, regardless if this device is purchased from CERN or of the management model desired. ![](https://codimd.web.cern.ch/uploads/upload_69627c06924da3065927050be74867d5.png) --- Choose `Offline Account`. ![](https://codimd.web.cern.ch/uploads/upload_02697beda42ebf1009c5a47245af9b35.png) --- Click on `Skip for now`. ![](https://codimd.web.cern.ch/uploads/upload_01df9e552a2254d285f1dc18a0025686.png) --- <!-- ![Sign in using CERN email](https://codimd.web.cern.ch/uploads/upload_cb40124670690893f380646c4bbacad0.png) --> <!-- --- --> <!-- ![Sign in using CERN Microsoft Address](https://codimd.web.cern.ch/uploads/upload_d450523eb47eaa42adab492a957e2699.png) --> <!-- --- --> <!-- Click on the `Sign-in Options` link. --> <!-- ![Sign in Options](https://codimd.web.cern.ch/uploads/upload_d01e2864f75248651100055749cfe6a7.png) --> <!-- --- --> <!-- Then, choose `Domain join instead`. --> <!-- ![Domain Join](https://codimd.web.cern.ch/uploads/upload_f78cbd84c2994b2c6841ff6570033684.png) --> <!-- --- --> Provide a username for your local account. **It is recommended that you keep it different from your CERN username.** ![Local Username](https://codimd.web.cern.ch/uploads/upload_156a1fed99961ec2b5f188ca50a5f955.png) --- Provide a password for the local account. ![Local Account Password](https://codimd.web.cern.ch/uploads/upload_d725fe8498d6ed195f66cbd221dbb78c.png) --- Confirm the password. ![Password Confirmation](https://codimd.web.cern.ch/uploads/upload_2df80d6001d9368ccb4998bb540b8234.png) --- For regaining access to your device when losing your password, set up three security questions. ![Security Question 1](https://codimd.web.cern.ch/uploads/upload_5ade856524a28df9b1c0d216e6505bfe.png) --- Provide the second security question & answer. ![Security Question 2](https://codimd.web.cern.ch/uploads/upload_38144d9da5a92d24f1a4f33c754a157f.png) --- Provide the third security question & answer. ![Security Question 3](https://codimd.web.cern.ch/uploads/upload_537374c495369092f6ae2975f32c929a.png) --- Make the following choices according to your preferences. ![Privacy Settings](https://codimd.web.cern.ch/uploads/upload_c381816139bec9a7af979378e5769f1b.png) --- Make the following choices according to your preferences. ![Privacy Settings 2](https://codimd.web.cern.ch/uploads/upload_953353a069c01b89217b91e193185a7d.png) --- Make the following choices according to your preferences. ![Privacy Settings 3](https://codimd.web.cern.ch/uploads/upload_a1a9fdeaec35f0bc0a5d8828b20e1376.png) <!-- Make the following choice according to your preference. --> <!-- ![Location Access](https://codimd.web.cern.ch/uploads/upload_e3f6c072f3ed1dddf866e8653ba79e14.png) --> <!-- --- --> <!-- Make the following choice according to your preference. --> <!-- ![Find My Device](https://codimd.web.cern.ch/uploads/upload_6a85e9c6b5a5796242aca93197fda644.png) --> <!-- --- --> <!-- Make the following choice according to your preference. --> <!-- ![Diagnostic Data](https://codimd.web.cern.ch/uploads/upload_0e409e6941745768b63824f0e75115dc.png) --> <!-- --- --> <!-- Make the following choice according to your preference. --> <!-- ![Diagnostic Ink Typing](https://codimd.web.cern.ch/uploads/upload_e1ab8d1fb9316b3f54f40fa3aa81cc74.png) --> <!-- --- --> <!-- Make the following choice according to your preference. --> <!-- ![Tailored Experiences](https://codimd.web.cern.ch/uploads/upload_c46d871e38787cae1f54c6bb78b033a3.png) --> <!-- --- --> <!-- Make the following choice according to your preference. --> <!-- ![Advertising ID](https://codimd.web.cern.ch/uploads/upload_33a7ef41eac32968c71135a00664f3a6.png) --> --- Please wait for Windows to set up your account. ![Final Configuration](https://codimd.web.cern.ch/uploads/upload_f239d3c3b40649e5e94c70601a48c591.png) --- The initial Windows setup is complete. Please proceed to choosing your management model on the next slide. ![Windows Welcome](https://codimd.web.cern.ch/uploads/upload_927e739ef606f1636fdfed6fac28fa1f.png) --- <!-- .slide: id="management-models" --> ### Choosing your management model Please choose the desired management model for your device: <ul style="margin-bottom: 20px;"> <li><a href="#/cern-managed">CERN Managed</a></li> <li><a href="#/self-managed">Self Managed</a></li> </ul> A summary of these two models will be shown in the next slides. Further details may be found at [cern.ch/windows](https://cern.ch/windows). --- <!-- .slide: id="cern-managed" --> <h3 style="margin-bottom: 5px;">CERN-managed model</h3> <span style="font-size: 60%; margin-top: 0; margin-bottom: 0;"><sup>[&lt; Back to management models](#/management-models)</sup></span> When your device is CERN-managed: - you have access to the entire app catalogue including licensed software - CERN-specific settings apply to your machine - system updates are managed by us, thus your device will adhere to the Monthly Updates schedule However, where required your device may be configured as CMF locally-managed to transfer the responsibility of your device security to you, and allow you to schedule the updates installation at your own convenience. --- #### Set up your device as CERN-managed There are two ways in which your device can be set up as CERN-managed: - [Join the CERN domain](#/join-cern-domain) (recommended, no reinstallation required) This approach is recommended for most users, both of new devices and already configured ones (such as personal devices). Once your device joins the CERN domain, it will automatically receive all relevant CERN settings and have access to CERN's list of applications via CMF. Step-by-step instructions are provided next. - [Reinstall Windows with CERN-specific configuration](https://devices.docs.cern.ch/devices/windows/installation/) This is the usual method IT admins configure new devices as CERN-managed, and is the more advanced approach. --- <!-- .slide: id="join-cern-domain" --> ### Join the CERN domain Right-click on the Start Menu button, then choose System ![Start Menu Settings](https://codimd.web.cern.ch/uploads/upload_672750e4e9a8056b1eeb80ec4b481cdf.png) --- Scroll down and click on the `Domain or workgroup` option ![Rename PC 2](https://codimd.web.cern.ch/uploads/upload_99abf6a199ebdd77a8f0c207d2eaa2e3.png) --- Click on the `Change` button. Make sure the `Computer name` is exactly the same that you previously registered in the Network Database. Click on the `Domain` option, then type `cern.ch` and click `OK`. You will be asked to provide your credentials, please use your CERN account. ![](https://codimd.web.cern.ch/uploads/upload_8799096672a766c716ef8048df11eb5b.png) <!-- ![Rename PC 3](https://codimd.web.cern.ch/uploads/upload_4addb70b4295c172eb9dd1b226fee664.png) --> --- After successfully joining the domain, you will be greeted with a `Welcome to the cern.ch domain` message. After closing the panels by clicking `OK`, Windows will ask you to restart. Please proceed doing so to finish configuring your device. ![](https://codimd.web.cern.ch/uploads/upload_fd301da6f07f18a3c284ef4f1d4f9c60.png) ![](https://codimd.web.cern.ch/uploads/upload_3a4f5367d9c294c969150e6d09b62166.png) ![](https://codimd.web.cern.ch/uploads/upload_98c410c631aaec6515ee9c45a7b7832c.png) <!-- In the `Computer name` field, type the exact name you gave to your device during the LANDB Network registration. --> <!-- Choose the `Domain` option under `Member of`, and type `cern.ch` as the `Domain`. Click OK. --> <!-- ![Rename PC 4](https://codimd.web.cern.ch/uploads/upload_ea167983259e8cb6609e2cba7fb2f708.png) --> <!-- --- --> <!-- Provide your CERN credentials for registering your device, after which a welcome message will appear. --> <!-- ![Rename PC 5](https://codimd.web.cern.ch/uploads/upload_1e3ae64f5025998f414d9ccdd33805ca.png) --> <!-- --- --> <!-- Windows will ask you to restart your device, please proceed doing so. --> <!-- ![Rename PC 6](https://codimd.web.cern.ch/uploads/upload_f4478a183c63d4716efd604063d79aff.png) --> <!-- --- --> <!-- Close the panel, after which Windows will prompt you for the restart. --> <!-- ![Rename PC 7](https://codimd.web.cern.ch/uploads/upload_ef5fe16c96bde1d1122aa5c326e45a5f.png) --> <!-- --- --> <!-- Choose Yes, and wait for the machine to be rebooted. --> <!-- ![Rename PC 8](https://codimd.web.cern.ch/uploads/upload_9907346d2db1a41bc27a0e11099e6475.png) --> --- After your device has restarted, select `Other user` and provide your CERN credentials for logging in. ![Domain Joined](https://codimd.web.cern.ch/uploads/upload_46543b1d6edfc352fa2864b115db7730.png) --- After logging in, you will the background as below, showing you that CMF is installing the default apps on your device. Some restarts may occur during this process, please make sure to wait until the background is changed before using your device. ![](https://codimd.web.cern.ch/uploads/upload_2229f05ce84eed0bd1aa93b36c1a5310.png) --- Once that happens, congrats! Your device is now set up as CERN-Managed. ![](https://codimd.web.cern.ch/uploads/upload_6ee3cd0db1786e538852dba55b2a3b19.png) --- <!-- .slide: id="self-managed" --> <h3 style="margin-bottom: 5px;">Self-Managed model</h3> <span style="font-size: 60%; margin-top: 0; margin-bottom: 0;"><sup>[&lt; Back to management models](#/management-models)</sup></span> The Self-Managed model is an alternative method for configuring your device for CERN use. More specifically: - you obtain access to a subset of CERN's applications via the [CERN AppStore](https://appstore.web.cern.ch/) - your device will not receive any CERN-specific settings - system updates are managed by you via Windows Update (the default for Windows devices) and is your reponsibility to keep your system and apps up-to-date For configuring your device as self-managed, please follow the instructions on [how to install the CERN AppStore](https://devices.docs.cern.ch/devices/windows/CERNAppstore/client/) on your device.