1.21k likes | 1.48k Views
MSIX: Inside and Out. John Vintzel, Principal Program Manager Lead @jvintzel Nona Sirakova, Program Manager II #MSIX. BRK2467. Always up to date Reuse your existing assets Protect your data Provide security and reliability Simplify app deployment. Never regret installing an app.
E N D
MSIX: Inside and Out John Vintzel, Principal Program Manager Lead @jvintzel Nona Sirakova, Program Manager II #MSIX BRK2467
Always up to date • Reuse your existing assets • Protect your data • Provide security and reliability • Simplify app deployment Never regret installing an app
Windows 10 is proving to be a catalyst to modernize IT • App Packaging is fundamental to *all* Enterprise IT • Designed for XP era IT lifecycle • Packaging is done by IT pros (or SI’s) *not* developers • Today packaging is either MSI or App-V • Applies to internal LOB & 3rd party apps (repackaging) • Microsoft has not addressed the IT Pro packager since App-V v3.0 Enable Enterprise IT to better enableModern IT
To modernize IT packaging needs evolve Break the chain of repackaging apps and simplify enterprise app deployment Enable Enterprise IT to better enable Modern IT
Modern IT: Application Lifecycle Today Developer IT Pro Microsoft Intune Microsoft App-V System Center Configuration Manager Custom Tools for MSI Repeat IT Pro repackaging for every OS and App update
Packaging Paralysis Acquire / Develop App ($$’s) Create Custom Package ($’s) New OS Release New Version of App Update Custom Package ($’s) Create Custom Package ($’s) FAIL Create Custom Package ($’s) New OS Update Custom Package ($’s) New Version of App Update Custom Package ($’s) Update Custom Package ($’s) New Version of App New OS Create Custom Package ($’s) New OS Release
Modern IT Virtuous Cycle Microsoft Store for Businessor Mgmt Server Windows Update Microsoft Store or any CDN IT Customize App Update OS Update Auto Update Auto Update Auto Update Auto Update Auto Update Auto Update ITCustomize OS Update App Update WaaS App Customization Modern IT Enable OS, Apps & IT to update independently
Modern IT: Application Lifecycle Developer IT Pro Microsoft Store for Business Tools MSIX Microsoft Intune
Evolve to a modern deployment technology Setup.exe MSIX MSI
Never Regret Installing an app • Predictable, safe, and reliable deployment • Clean uninstall … really! Disk space optimization • Single instance storage of files (across apps and users) • Resource Packages Network optimization • Differential updates at the block level • Shared files are never downloaded again MSIX Benefits
Simpler packaging and deployment • Declarative install via Manifest file • Identity, formal versioning and device targeting OS Managed • Windows installs, updates and removes • Apps are installed per user • App state formalized Windows provides integrity for the app • Tamper protection • Policies can limit the trusted sources via signing MSIX Benefits
MSIX File Deconstructed MSIX Package Payload Files • Everything the app needs is within the MSIX file Footprint Files AppManifest AppBlockmap AppSignature CodeIntegrity Package
MSIX File Deconstructed MSIX Application Files Package Payload • Declarative install via Manifest file • App signature needs to be trusted on the device • Tamper protection via BlockMap and signature • OS manages install, updates, and removal Footprint Files AppManifest AppBlockmap AppSignature CodeIntegrity Package
Blocks laid down on disk and app is registered Package installed on local machine for the 1st time
Blocks laid down on disk and app is registered Package installed on local machine for the 1st time
Existing blocks are hard linked for reuse Updates are downloaded at the block level
Package is registered and the old blocks are cleaned up Existing blocks are hard linked for reuse Updates on download the blocks that are different
App is now the new version Package is registered and the old blocks are cleaned up Existing blocks are hard linked for reuse
Tools are vital • Building toolset aimed at IT Pros and developers • Significant upgrade from the Desktop App Converter • Support from 3rd Party Partners
MSIX Packaging Partners
MSIX Packaging Tool available for free download • Directly from the Microsoft Store (for Business) • Offline distribution available from Microsoft Store for Business • As a “Quick Create” virtual machine
MSIX Packaging Tool available for free download • Release target for October 2018 • New features will be available independent of OS update • Frequent updates will be available based on user feedback
MSIX Packaging Tool Nona Sirakova
MSIX Packaging Tool for IT Pros Migration: • MSI/Windows Installer • App-V • Setup.exe based installations • Script based installations • ClickOnce Customization: • Create Modification packages • Deploy code • Provide customization to registry/file system etc
Package Support Framework • Why? • Many apps can’t (or won’t) make code changes • Help apps to follow the best practices of the modern environment • Flexibility • What? • Enables app behavior to be changed at runtime • Built on Windows detours so you can alter api calls at runtime • You are in control BRK3220 - MSIX – Accelerating Windows 10 and app deployment (Wednesday, September 26, 12:30 PM - 1:45 PM)
No limits on distribution Microsoft Store For Business Microsoft Intune Configuration Manager
Web based installation Nona Sirakova
Updating of Apps • Microsoft Store – Automatically updated via Windows Update • ConfigMgr or Intune - IT Pro controlled from the management console • Non-managed enterprise servers – Updates can be enabled via AppInstaller file • Configurable silent updates • Update check on app launch Coming Soon: Force Update to Any Version
Container Continuum Full Trust Win32 App Kernel NTUSER, GDI, etc.
Container Continuum Full Trust WDAG Container Win32 App UWP and Win32 Apps Kernel Isolated Kernel NTUSER, GDI, etc.
Container Continuum Desktop Bridge Container Desktop Bridge App Full Trust WDAG Container Win32 App UWP and Win32 Apps Kernel Isolated Kernel FS / Registry Filters NTUSER, GDI, etc.
Container Continuum App Container Desktop Bridge Container UWP App Desktop Bridge App Full Trust WDAG Container Win32 App UWP and Win32 Apps Kernel Isolated Kernel Resource & Capability Management FS / Registry Filters NTUSER, GDI, etc.
Container continuum MSIX Container UWP App Desktop Bridge App Full Trust WDAG Container Win32 App UWP and Win32 Apps Kernel Isolated Kernel Resource & Capability Management FS / Registry Filters NTUSER, GDI, etc.
Keep code flowing Allow apps to update from the publisher Preserve your control Maintain ability to customize app to meet your requirements Enable code and content to be added to publisher packages Decouple update cycles Auto Update App Update App Update Auto Update
Start with base app Customize with Modification MSIX MSIX Container HR App v1.0
Customize with Modification MSIX • Start with base app • Add Modification package w/customizations MSIX Container HR App v1.0 Customizations (no code) Modification v1.0 (code)
Customize with Modification MSIX • Start with base app • Add Modification package w/customizations • Update app and customization separately MSIX Container MSIX Container HR App v2.0 HR App v1.0 HR App v1.0 Customizations (no code) Modification v1.0(code)
Customize with Modification MSIX • Start with base app • Add Modification package w/customizations • Update app and customization separately • Multiple modification packages can be deployed MSIX Container MSIX Container HR App v2.0 HR App v1.0 HR App v1.0 Modification v1.1 (code)
Modification Package Demo Nona Sirakova
Modern IT Virtuous Cycle Enterprise Customization Windows Application IT Customize App Update OS Update Auto Update Auto Update Auto Update Auto Update Auto Update Auto Update ITCustomize OS Update App Update MSIX WaaS MSIX Modern IT
What about App-V? • App-V is continuing to ship throughout CY19 • Conversion via MSIX Packaging Tool • App-V 5.x is available now • App-V 4.6 SP3 coming in a future update Continue to use App-V and use as an accelerator to MSIX