8cd0c147d8
Previously the stage indices reflected logical milestones but not the order they fire in. Run-ShopfloorSetup posted idx=1 (start) and idx=4 (PPKG) - but 09-Setup-Keyence (inside per-type loop) ran BETWEEN them and posted idx=5/6. The dashboard then "regressed" from 6 back to 4 when PPKG fired, making it look stuck at the per-type-complete card. New numbering matches actual execution order: 1 - WinPE: PESetup / WIM apply (startnet.cmd) 2 - Run-ShopfloorSetup: starting (Run-ShopfloorSetup.ps1) 3 - 09-Setup-<Type>: starting (per-type) 4 - 09-Setup-<Type>: complete (per-type) 5 - Run-ShopfloorSetup: PPKG enrollment (Run-ShopfloorSetup.ps1) 6 - Run-ShopfloorSetup: handoff to Monitor (Run-ShopfloorSetup.ps1) 7 - Monitor-IntuneProgress: Intune Device ID captured services/imaging_status.py rewind threshold reverts to stage_index <= 1 now that WinPE startnet posts idx=1. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
181 lines
8.5 KiB
PowerShell
181 lines
8.5 KiB
PowerShell
# 09-Setup-Keyence.ps1 - Keyence type setup (runs during shopfloor-setup phase).
|
|
#
|
|
# Performs the imaging-time install of Keyence VR-6000 Series Software MSI +
|
|
# KEYENCE VR Series USB driver from the staged bundle. Ongoing enforcement
|
|
# is handled by GE-Enforce (registered separately in Run-ShopfloorSetup.ps1)
|
|
# reading keyence/manifest.json from the tsgwp00525 share.
|
|
#
|
|
# Layout at $PSScriptRoot (xcopied by startnet.cmd only for PCTYPE=Keyence):
|
|
# keyence-manifest.json
|
|
# 09-Setup-Keyence.ps1 (this file)
|
|
# installers\VR-6000 Series Software.msi
|
|
# drivers\keyence_vr_series.inf (+ cat + amd64\{Wdf,WinUsb}CoInstaller*.dll)
|
|
#
|
|
# Library lookup: the imaging-time install uses the common Install-FromManifest
|
|
# library at ..\common\lib\Install-FromManifest.ps1 (relative to $PSScriptRoot).
|
|
#
|
|
# Log: C:\Logs\Keyence\09-Setup-Keyence.log
|
|
# C:\Logs\Keyence\install.log (written by Install-FromManifest)
|
|
|
|
$ErrorActionPreference = 'Continue'
|
|
|
|
$manifestPath = Join-Path $PSScriptRoot 'keyence-manifest.json'
|
|
$libSource = Join-Path $PSScriptRoot '..\common\lib\Install-FromManifest.ps1'
|
|
|
|
$logDir = 'C:\Logs\Keyence'
|
|
$installLog = Join-Path $logDir 'install.log'
|
|
$transcriptLog = Join-Path $logDir '09-Setup-Keyence.log'
|
|
|
|
if (-not (Test-Path $logDir)) {
|
|
New-Item -Path $logDir -ItemType Directory -Force | Out-Null
|
|
}
|
|
|
|
try { Start-Transcript -Path $transcriptLog -Append -Force | Out-Null } catch {}
|
|
|
|
function Write-KeyenceLog {
|
|
param([string]$Message, [string]$Level = 'INFO')
|
|
$stamp = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
|
|
Write-Host "[$stamp] [$Level] $Message"
|
|
}
|
|
|
|
Write-KeyenceLog "================================================================"
|
|
Write-KeyenceLog "=== Keyence Setup (imaging-time) session start (PID $PID) ==="
|
|
Write-KeyenceLog "Running as: $([System.Security.Principal.WindowsIdentity]::GetCurrent().Name)"
|
|
Write-KeyenceLog "Script root: $PSScriptRoot"
|
|
Write-KeyenceLog "================================================================"
|
|
|
|
# Status push to PXE webapp - best-effort, never blocks imaging.
|
|
$pxeStatusLib = Join-Path $PSScriptRoot '..\Shopfloor\lib\Send-PxeStatus.ps1'
|
|
if (Test-Path $pxeStatusLib) {
|
|
try { . $pxeStatusLib; Send-PxeStatus -Stage '09-Setup-Keyence: starting' -StageIndex 3 -StageTotal 8 } catch { }
|
|
}
|
|
|
|
# Diagnostic dump
|
|
foreach ($file in @('pc-type.txt','pc-subtype.txt','machine-number.txt')) {
|
|
$path = "C:\Enrollment\$file"
|
|
if (Test-Path -LiteralPath $path) {
|
|
$content = (Get-Content -LiteralPath $path -First 1 -ErrorAction SilentlyContinue).Trim()
|
|
Write-KeyenceLog " $file = $content"
|
|
} else {
|
|
Write-KeyenceLog " $file = (not present)"
|
|
}
|
|
}
|
|
|
|
# ============================================================================
|
|
# Step 0: Pre-stage Keyence VR Series USB driver + trust the publisher cert.
|
|
# ============================================================================
|
|
# The VR-6000 MSI invokes dpinst.exe internally as a custom action to install
|
|
# the USB driver. dpinst inherits the MSI's silent context inconsistently and
|
|
# usually pops a Setup-wizard GUI even with /qn on the parent MSI.
|
|
#
|
|
# Two pre-steps suppress the prompt:
|
|
# 1. pnputil /add-driver /install stages the INF + co-installers into the
|
|
# Windows DriverStore. dpinst then sees the driver as already present and
|
|
# skips its install path (the GUI lives behind the "needs to install"
|
|
# branch).
|
|
# 2. Add the publisher cert (extracted from the catalog file) to
|
|
# LocalMachine\TrustedPublisher so dpinst's "Would you like to install
|
|
# this device software?" Windows Security dialog auto-accepts.
|
|
#
|
|
# If either step fails, log + continue - the MSI is still expected to install
|
|
# successfully; the only fallout is the GUI prompt the operator would have
|
|
# had to click through anyway.
|
|
$driverInf = Join-Path $PSScriptRoot 'drivers\keyence_vr_series.inf'
|
|
$driverCat = Join-Path $PSScriptRoot 'drivers\KEYENCE_VR_SERIES.cat'
|
|
|
|
if (Test-Path -LiteralPath $driverInf) {
|
|
Write-KeyenceLog "Pre-staging USB driver via pnputil (suppresses dpinst GUI inside MSI)"
|
|
try {
|
|
$pnpOut = & pnputil /add-driver $driverInf /install 2>&1
|
|
Write-KeyenceLog " pnputil exit $LASTEXITCODE"
|
|
foreach ($line in ($pnpOut | Where-Object { $_ })) { Write-KeyenceLog " $line" }
|
|
} catch {
|
|
Write-KeyenceLog " pnputil failed: $_" 'WARN'
|
|
}
|
|
} else {
|
|
Write-KeyenceLog "Driver INF not found at $driverInf - skipping pre-stage" 'WARN'
|
|
}
|
|
|
|
if (Test-Path -LiteralPath $driverCat) {
|
|
Write-KeyenceLog "Adding Keyence publisher cert to LocalMachine\TrustedPublisher store"
|
|
try {
|
|
$sig = Get-AuthenticodeSignature -FilePath $driverCat -ErrorAction Stop
|
|
if ($sig -and $sig.SignerCertificate) {
|
|
$store = New-Object System.Security.Cryptography.X509Certificates.X509Store('TrustedPublisher','LocalMachine')
|
|
$store.Open('ReadWrite')
|
|
$store.Add($sig.SignerCertificate)
|
|
$store.Close()
|
|
Write-KeyenceLog " Added: $($sig.SignerCertificate.Subject) thumb=$($sig.SignerCertificate.Thumbprint)"
|
|
} else {
|
|
Write-KeyenceLog " Catalog is not signed - cert pre-trust skipped" 'WARN'
|
|
}
|
|
} catch {
|
|
Write-KeyenceLog " Cert add failed: $_" 'WARN'
|
|
}
|
|
} else {
|
|
Write-KeyenceLog "Driver catalog not found at $driverCat - cert pre-trust skipped" 'WARN'
|
|
}
|
|
|
|
# ============================================================================
|
|
# Step 1: Install via manifest (imaging-time)
|
|
# ============================================================================
|
|
if (-not (Test-Path $manifestPath)) {
|
|
Write-KeyenceLog "keyence-manifest.json not found at $manifestPath" "ERROR"
|
|
} elseif (-not (Test-Path $libSource)) {
|
|
Write-KeyenceLog "Install-FromManifest.ps1 not found at $libSource" "ERROR"
|
|
} else {
|
|
Write-KeyenceLog "Running Install-FromManifest (InstallerRoot=$PSScriptRoot)"
|
|
& $libSource -ManifestPath $manifestPath -InstallerRoot $PSScriptRoot -LogFile $installLog
|
|
$rc = $LASTEXITCODE
|
|
Write-KeyenceLog "Install-FromManifest returned $rc"
|
|
}
|
|
|
|
# ============================================================================
|
|
# Step 1.5: Install Keyence-bundled DirectX End-User Runtimes
|
|
# ============================================================================
|
|
# VR-6000's MSI deploys DXSETUP.exe to the install dir but never runs it.
|
|
# Without DirectX, the app's first launch errors: "Runtime required to move
|
|
# the application is not installed correctly. Install from the following
|
|
# folder: C:\Program Files\Keyence\VR-6000\Common\DirectX End-User Runtimes\
|
|
# DXSETUP.exe". Run it silently here; /silent suppresses all UI + reboot.
|
|
$dxSetup = 'C:\Program Files\KEYENCE\VR-6000\Common\DirectX End-User Runtimes\DXSETUP.exe'
|
|
$dxSetupAlt = 'C:\Program Files (x86)\KEYENCE\VR-6000\Common\DirectX End-User Runtimes\DXSETUP.exe'
|
|
if (Test-Path -LiteralPath $dxSetup) { $dxPath = $dxSetup }
|
|
elseif (Test-Path -LiteralPath $dxSetupAlt) { $dxPath = $dxSetupAlt }
|
|
else { $dxPath = $null }
|
|
|
|
if ($dxPath) {
|
|
Write-KeyenceLog "Running DirectX End-User Runtimes: $dxPath /silent"
|
|
try {
|
|
$p = Start-Process -FilePath $dxPath -ArgumentList '/silent' -Wait -PassThru -NoNewWindow
|
|
Write-KeyenceLog " DXSETUP exit $($p.ExitCode)"
|
|
} catch {
|
|
Write-KeyenceLog " DXSETUP failed: $_" 'WARN'
|
|
}
|
|
} else {
|
|
Write-KeyenceLog "DXSETUP.exe not found under either Program Files - DirectX install skipped" 'WARN'
|
|
}
|
|
|
|
# ============================================================================
|
|
# Step 2: OpenText auto-start at login (HostExplorer "WJ Shopfloor" session)
|
|
# ============================================================================
|
|
$autoStartLib = Join-Path $PSScriptRoot '..\Shopfloor\lib\Set-OpenTextAutoStart.ps1'
|
|
if (Test-Path -LiteralPath $autoStartLib) {
|
|
Write-KeyenceLog "Calling $autoStartLib"
|
|
& $autoStartLib
|
|
} else {
|
|
Write-KeyenceLog "Set-OpenTextAutoStart.ps1 not found at $autoStartLib - OpenText auto-start NOT configured" 'WARN'
|
|
}
|
|
|
|
if (Get-Command Send-PxeStatus -ErrorAction SilentlyContinue) {
|
|
$finalStatus = if ($rc -eq 0) { 'in_progress' } else { 'failed' }
|
|
$finalErr = if ($rc -ne 0) { "Install-FromManifest exit $rc" } else { '' }
|
|
Send-PxeStatus -Stage '09-Setup-Keyence: complete' -StageIndex 4 -StageTotal 8 -Status $finalStatus -Error_ $finalErr
|
|
}
|
|
|
|
Write-KeyenceLog "================================================================"
|
|
Write-KeyenceLog "=== Keyence Setup session end ==="
|
|
Write-KeyenceLog "================================================================"
|
|
|
|
try { Stop-Transcript | Out-Null } catch {}
|