The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Prepare the Windows image for cloning

Prev Next

Run the System Preparation (Sysprep) tool to remove machine-specific information from the Windows installation, such as its unique hostname and Security Identifier (SID). This process is essential to prevent ID duplication.

Use a Sysprep answer file (unattend.xml) to automate the process and ensure each deployed clone receives a unique hostname.

Finalize and deploy the Golden Image

After preparing the base image, finalize it for use as a template.

  1. Perform final checks to confirm all settings are correct.

  2. Shut down the virtual machine.

  3. Clone the virtual machine to a template. This is your finalized golden image.

  4. Deploy new systems from the template.

Post-deployment system behavior

When a new system is deployed from the golden image (reference virtual image) for the first time:

  • The Trellix Agent service starts and generates a new, unique GUID for the system.

  • The Windows operating system generates a new device UUID and other unique identifiers as directed by the Sysprep process.