Archive for April 2009

Windows 7 Bitlocker and changing the system language

I’ve installed the Windows 7 RC in English. Worked perfectly, but most of our customers run their systems in German, so’ill have to stay up-to-date on how Microsoft’s translators “creatively” translated their work into German (actually, Microsoft’s translations aren’t the worst i’ve seen).

So today i decided the install the German language pack on my home PC and on my laptop – on the home PC, this worked as expected. On my laptop, which has it’s hard drive encrypted and protected by BitLocker in TPM mode.

After the obligatory reboot, i changed the system language. The machine rebooted and then asked for my Bitlocker recovery password – in German. It was obvious what happened: On German Vista machines with Bitlocker enabled, the Windows Boot Manager was still in English, but on Windows 7 the boot manager was also translated – which means that it now failed the integrity check because it was modified.

Luckily i could use our Terminal Services Gateway to log onto my administrative terminal server, where i had the BitLocker Recovery Password Viewer installed, so viewing my recovery key was quick and easy.

After booting into my now (mostly) German Windows 7, i temporarily halted Bitlocker protection, and immediately reenabled. This caused Windows 7 to reverify the state of the Boot Manager, and after i another reboot i was sure that everything was fine.

Oh, and this is one of the rather funny translation episodes: The window is not resizeable and the text doesn’t fit.

remotedesktopverbindu

Windows 7 on a ThinkPad W500

Windows 7 Score ThinkPad W500Windows 7 is finally nearing it’s completion, and the Release Candidate is finally available. After installing the Windows 7 Beta Build 7000 back in December on my PC at home, i decided to upgrade my work Laptop to Windows 7. The score to the right is from my Laptop.

First of all, i had Bitlocker enabled on my ThinkPad W500, which was running Windows Vista x32 and i intended to install Windows 7 x64. So a direct inplace upgrade was out of the question. I created a backup of the machine, disabled Bitlocker, upgraded my laptops BIOS to the latest version, and booted Windows 7 setup from an USB stick.

Next, i pressed Shift-F10 on the setup screen, deleted all the Windows and Program Files folders, and then started an installation directly on the Bitlocker-enabled drive (this way, i didn’t have to restore all the files i already had on the drive, saving me valuable time).

Windows 7 was done after about 25 minutes, and greeted me with Aero enabled and the 1920×1200 15″ screen already set to a scaling factor of 125%. This is were i also noticed that DPI settings are now user dependant, instead of affecting the whole system. An extremely nice feature, that probably needed quite a bit of work. I set the scaling factor to 115%, which is the best factor between readability and remaining screen real estate for me.

Unfortunately, the switchable graphics driver available from Lenovo did not support WDDM 1.1. I went into the BIOS and configured the machine to always use the Intel graphics. However, i noticed that unlike in Vista, the Intel graphic card did not produce 100% smooth Aero animations. Since i have the power supply connected most of the time anyway, i configured the system to always use the ATI card. This produced better results.

The fingerprint reader does not work yet, but i didn’t invest time in that since i don’t use it anyway. Also, there are issues with Intel AMT, which i don’t use either.

So the base OS worked flawlessly after install. Even switching the graphics card around didn’t phase it, Aero was automatically enabled and the correct resolution configured. WLAN, Audio, everything you would need worked out of the Box.

I joined the machine to the domain, where it sucked down all the GPOs for our corporate network. I unplugged the network cable, and it automatically connected to the corporate wireless network, authenticated by EAP-TLS.

Since our printserver is WS08 x64 box, corporate printing also worked automatically, without any additional work. Of course, all the other group policy settings applied as they should, and i didn’t find any issues yet regarding policy settings.

But an OS alone doesn’t serve a purpose, you need applications. I’ve installed the following applications:

  • Adobe Reader 9.1 Works perfectly.
  • DIAS-iS Network Client 3.2 Works perfectly.
  • DIAS-iS OSP Version 3 for Office 2007 Works perfectly.
  • Office 2007 SP1 Enterprise, Visio and PDF/XPS plugin Works perfectly.
  • Office 2007 Primary Interop Assemblies Works perfectly.
  • Office 2007 VSTO 3.0 Works perfectly.
  • Office 2007 Communicator R1 with latest Hotfix Works perfectly.
  • Solitas InfoStore Windows Retrieval Works perfectly.
  • IBM System i Access V6R1M0 x64 Works perfectly.
  • IrfanView Works perfectly.
  • Mozilla Firefox 3.1b3 Works perfectly.
  • PuTTY 0.60 Works perfectly.
  • SonicWALL Global VPN Client x64 Sometimes loses it’s IPsec driver – repairing the program helps.
  • Windows Live Messenger Works perfectly.
  • Virtual CloneDrive Works perfectly.
  • WinRAR Works perfectly.
  • tn5250 Works perfectly.

So far, so good. The SonicWALL issue may be annoying, but it’s not a dealbreaker. Judging from my experience, it’s a SonicWALL issue. Opening a bug there won’t help, as they don’t support Windows 7 yet. I can live with that.

Perfomance on Windows 7 on this machine is even better than Vista. I can now fully use the 4GB RAM installed in my laptop. Never used Windows XP on this machine, i can’t compare performance. All the business apps i need to do my job work flawlessly. Printing works flawlessly.

Windows 7 PC scoreWindows 7 is even better than Vista. But for those that didn’t spend the last three years using Windows Vista, it may be rather hard to get used to all the new stuff. For example, the deployment options between 7 and Vista are both based on WIM imaging, with a few improvements here and there. If you know how to do it on Vista, you can also do it in Windows 7.

As a bonus, the score to the right from my desktop PC.

IBM releases new DSA and UpdateXpress versions

UXSP 3With the release of the new generation of System x servers, IBM also revamped it’s tool offering.

Central point of the new IBM offering is the ToolsCenter, which serves as a starting point for all important IBM tools.

The two most important tools, which every admin dealing with IBM System x servers should know are now available in new versions, which offer improved functionality.

UpdateXpress System Pack Installer

UpdateXpress is now available in version 3. Pictured to the right is the new user interface, which offers much needed improvements. The previous versions looked like a leftover from the cold war.

UpdateXpress allows you to update all your System x drives in one automatic swoop, without the need to meticulously check the IBM web site for newly released drivers.

Dynamic System Analysis

DSA is now available in version 2.20. While the handling of the tool hasn’t changed much, there is now a 64bit version available. A few bugs i’ve encountered on 64bit systems are fixed with this new release.

New IBM x3650 M2? Remember these important things!

x3650 M2 High ResToday i attended an interesting product presentation from IBM, about their Nehalem product line up. In addition to the information i’ve already gleaned from the IBM web page, i’ve learned several things that are equally important.

If you’ve never heard about the x3650 M2, i suggest you to read my introduction post first.

Planned availability, other new products

Planned general availability (GA) of the new x3650 M2 is the the 20th of April, or in pretty much 3 weeks. Orders, configuration and pricing is available – so if you want to buy a new server now and can wait for three weeks, you should order a x3650 M2.

At the end of April, the M2 versions of the x3400 and x3500 will be announced. Judging from the current timeline, this will put GA of those new products near May.

4 CPU machines are planned for Q1 2010. I don’t care much about those since we run all our heavy DB workloads on IBM POWER.

Positioning of the new Intel 5500 Xeons

Nehalem Xeons Product OverviewJust like the Core Microarchitecture brought many changes to servers, the new 5500 Xeons bring even more changes. It’s especially important for system administrators to understand the differences, and even more important if you’re selling systems to customers.

Here are a few key differences:

  • Memory speed depends on the CPU purchased and the amoung and type of memory installed into the server
  • Memory slots are only usuable if the associated CPU is installed
  • HyperThreading is reintroduced in 2/3rds of the CPUs – systems will show twice the amount of logical processors
  • TurboBoost is a new functionality that allows the CPU to run at higher clock speeds, depending on load and cooling

To the right you can see Intel’s official spec sheet. Intel introduces a “garbage bin” of CPUs that you should never use – the E5502 / E5504 / E5506 models. These CPUs do not support HyperThreading, TurboBoost, 1066 Memory and only have 4 instead of 8 megabytes of cache. Make sure to use E5520 or faster CPUs to ensure best performance. The performance difference between an E5506 and an E5520 is 15-20%, while the price difference is much smaller! In my opinion, the E5520 is currently the sweet spot between price and performance.

Order the right memory configuration

Intel Xeon LogoWith FB-DIMMs, memory configuration was simple, because FB-DIMMs were slow no matter which way you put it. However, with the new integrated memory controllers, memory of much higher speed is now available. Now, as a technician or sales things will get more complicated.

I wrote in an earlier post that i didn’t understand why IBM only put 16 DIMM slots into the machine, while HP installed 18 DIMM slots – the reason is that in most cases it makes little sense to populate all DIMM slots, because this will heavily reduce the bandwidth available, as the memory must run at lower speeds.

While HP has decided to offer registered and unregistered memory for their DL3xx G6 models, IBM only offers registered DIMMs. The x3650 M2 COG Guide offers a lot of in terms of possible configurations. The most important thing is keep the numbers of memory modules down – this makes it easier deploy them correctly.

Another important part is that memory is no longer ordered in pairs, but again separately as it was a few generations before. Most servers ship with two 1GB modules standard. This is not an optimal configuration, since you have three channels that could be used.

There are two ways to deal with this: either add a third 1 GB module and then add the rest of the memory you need. Or discard the two memory modules that come with the servers and just install the higher capacity modules you bought. My recommendation would be to discard the 1GB modules and install three 4GB modules – for most SMB environments, 12GB of memory suffices for almost all services.

Other part changes

The onboard RAID-Controller is gone, there is a new specially positioned but otherwise standard PCI-E slot for the RAID controller. The system ships with a non-BBWC controller called the BR10i. In most cases, it makes sense to replace the standard RAID-Controller with a ServeRAID MR10i.

Some configurations also require an enablement kit to drive all 12 disk slots. Only 8 disk slots are standard.

The RSA II Slimline is gone. IMM now offers a lot of the RSA II functionality by default, but the most important functionality, remote KVM still requires a so called “Virtual Media Key” (as it enables Remote Media as well). In general, if a customer has used RSA II Slimline up to now, also include a Virtual Media Key. This enables full IMM functionality.

SSD offerings have also been added. Currently, the pricing for the 50GB SATA SSD is 3970 CHF in SSCT. My assumption would be that this is a pricing error, but i’m not too sure about that.

Pricing

x3650 M2 sample pricing
Pricing hasn’t changed much. DDR3 memory seems to be a bit more expensive than the FB-DIMMs were, but that’ll pass as soon as DDR3 volume ramps up. I’ve created a sample config that is probably valid for most SMB deployments that clocks in at around 10k CHF. This is roughly the same as it was before with the standard x3650, except that the x3650 M2 will deliver a lot more performance for the money.