source: opsi/products/bitlocker/CLIENT_DATA/setup.ins @ 1035

; Copyright (c) uib gmbh (www.uib.de)
; This sourcecode is owned by uib
; and published under the Terms of the General Public License.
; credits: http://www.opsi.org/en/credits/

[Actions]
requiredWinstVersion >= "4.10.8.6"

DefVar $MsiId$
DefVar $UninstallProgram$
DefVar $LogDir$
DefVar $ProductId$  
DefVar $MinimumSpace$
DefVar $InstallDir$
DefVar $ExitCode$
DefVar $LicenseRequired$
DefVar $LicenseKey$
DefVar $LicensePool$

DefVar $RegKeyRebootCounter$
DefVar $RebootCounter$
Set    $RegKeyRebootCounter$ = "[HKLM\SOFTWARE\opsi.org\custom\bitlocker]"


DefVar $TpmPassword$
DefVar $RecoveryPassword$

Set $LogDir$ = "%SystemDrive%\tmp"

; ----------------------------------------------------------------
; - Please edit the following values                             -
; ----------------------------------------------------------------
;$ProductId$ should be the name of the product in opsi
; therefore please: only lower letters, no umlauts, 
; no white space use '-' as a seperator
Set $ProductId$       = "bitlocker"
Set $MinimumSpace$    = "1 MB"
; the path were we find the product after the installation
;Set $InstallDir$      = "%ProgramFiles32Dir%\<path to the product>"
;Set $LicenseRequired$ = "false"
;Set $LicensePool$     = "p_" + $ProductId$
; ----------------------------------------------------------------

if not(HasMinimumSpace ("%SystemDrive%", $MinimumSpace$))
        LogError "Not enough space on %SystemDrive%, " + $MinimumSpace$ + " on drive %SystemDrive% needed for " + $ProductId$
        isFatalError
        ; Stop process and set installation status to failed
else
        comment "Show product picture"
        ShowBitmap "%ScriptPath%\logo.png" $ProductId$
        
        ;if FileExists("%ScriptPath%\delsub.ins")
        ;       comment "Start uninstall sub section"
        ;       Sub "%ScriptPath%\delsub.ins"
        ;endif

    sub_get_rebootcounter
    comment "rebootcounter = $RebootCounter$"

        
        Message "Installing " + $ProductId$ + ", Counter: " + $RebootCounter$
        
        comment "Start setup program"

        set $TpmPassword$      = GetProductProperty("TpmPassword", "none")
        set $RecoveryPassword$ = GetProductProperty("RecoveryPassword", "none")

        ShellInAnIcon_status winst /sysnative

    if (( $RebootCounter$ = "" ) or ( $RebootCounter$ = "0" ))
        #winbatch_tpm_activate
        #sub_check_exitcode_tpm_activate
        ShellInAnIcon_tpm_activate winst /sysnative
        set $RebootCounter$ = "1"
        sub_do_reboot
    endif

    #winbatch_tpm_TakeOwnerShip
    #sub_check_exitcode_tpm_TakeOwnerShip
    ShellInAnIcon_tpm_TakeOwnerShip winst /sysnative

    #winbatch_bitlocker_activate
    #sub_check_exitcode_bitlocker_activate
    ShellInAnIcon_tpm_bitlocker_activate winst /sysnative
    ExitWindows /Reboot

    ShellInAnIcon_status winst /sysnative
endif

[ShellInAnIcon_status]
manage-bde -status
manage-bde -protectors c: -get

[ShellInAnIcon_tpm_activate]
manage-bde -tpm -TurnOn

[winbatch_tpm_activate]
manage-bde -tpm -TurnOn

[sub_check_exitcode_tpm_activate]
comment "Test exit code"
# WARNING: 
#   There are systems, that return 0, even if the TPM is already activated.
#   This results in an endless loop
#
set $ExitCode$ = getLastExitCode
if ($ExitCode$ = "0")
        comment "Looks good: setup program gives exitcode zero. Reboot required"
        ExitWindows /ImmediateReboot
else 
        if ($ExitCode$ = "-1")
                comment "TPM is already activated, ignored"
        else
                logError "Fatal: unknown error code ("+$ExitCode$+"), giving up"
                isFatalError
        endif
endif



[ShellInAnIcon_tpm_TakeOwnerShip]
manage-bde -tpm -TakeOwnerShip $TpmPassword$

[winbatch_tpm_TakeOwnerShip]
manage-bde -tpm -TakeOwnerShip $TpmPassword$

[sub_check_exitcode_tpm_TakeOwnerShip]
comment "Test exit code"
set $ExitCode$ = getLastExitCode
if ($ExitCode$ = "0")
    comment "Looks good: setup program gives exitcode zero"
else 
        if ($ExitCode$ = "-1")
                comment "TPM has an owner. ignored"
        else
        logError "Fatal: unknown error code ("+$ExitCode$+"), giving up"
        isFatalError
        endif
endif

[ShellInAnIcon_bitlocker_activate]
manage-bde -on c: -RecoveryPassword $RecoveryPassword$

[winbatch_bitlocker_activate]
manage-bde -on c: -RecoveryPassword $RecoveryPassword$

[sub_check_exitcode_bitlocker_activate]
comment "Test exit code"
set $ExitCode$ = getLastExitCode
if ($ExitCode$ = "0")
    comment "Looks good: setup program gives exitcode zero"
    ExitWindows /Reboot
else 
    logError "Fatal: unknown error code ("+$ExitCode$+"), giving up"
    isFatalError
endif


[Sub_check_exitcode]
comment "Test for installation success via exit code"
set $ExitCode$ = getLastExitCode
; informations to exit codes see
; http://msdn.microsoft.com/en-us/library/aa372835(VS.85).aspx
; http://msdn.microsoft.com/en-us/library/aa368542.aspx
if ($ExitCode$ = "0")
        comment "Looks good: setup program gives exitcode zero"
else
        comment "Setup program gives a exitcode unequal zero: " + $ExitCode$
        if ($ExitCode$ = "1605")
                comment "ERROR_UNKNOWN_PRODUCT  1605    This action is only valid for products that are currently installed."
                comment "Uninstall of a not installed product failed - no problem"
        else
                if ($ExitCode$ = "1641")
                        comment "looks good: setup program gives exitcode 1641"
                        comment "ERROR_SUCCESS_REBOOT_INITIATED 1641    The installer has initiated a restart. This message is indicative of a success."
                else
                        if ($ExitCode$ = "3010")
                                comment "looks good: setup program gives exitcode 3010"
                                comment "ERROR_SUCCESS_REBOOT_REQUIRED  3010    A restart is required to complete the install. This message is indicative of a success."
                        else
                                logError "Fatal: Setup program gives an unknown exitcode unequal zero: " + $ExitCode$
                                isFatalError
                        endif
                endif
        endif
endif

[sub_get_rebootcounter]
    Set $RebootCounter$ = GetRegistryStringValue( $RegKeyRebootCounter$ + "RebootCounter")
    if ( $RebootCounter$ = "" )
        set $RebootCounter$ = "0"
    endif

[sub_set_rebootcounter]
    if ( $RebootCounter$ = "" )
        set $RebootCounter$ = "0"
    endif
    registry_rebootcounter

[sub_do_reboot]
    sub_set_rebootcounter
    ExitWindows /ImmediateReboot

[registry_rebootcounter]
openkey $RegKeyRebootCounter$
set "RebootCounter" = "$Rebootcounter$"