To update a run-time image that is protected by EWF RAM mode


  1. Use EWF Manager to disable the overlay by typing the following command:ewfmgr c: -disable
  2. Restart the system.
  3. Install the application or update.
  4. Wait for the install to complete and restart the computer if required.
  5. Re-enable the EWF overlay by using the following command:ewfmgr c: -enable
  6. Restart the system to re-enable the EWF overlay.

To update a run-time image that is protected by EWF RAM Reg mode


  1. Restart the device to clear the RAM overlay.
  2. Commit the overlay to the protected volume and disable the EWF overlay by typing the following command:ewfmgr c: -commitanddisable

    Because RAM Reg modes store EWF configuration data in the registry, you must commit the disable change to the protected run-time image. For more information, see Configure EWF RAM Reg Mode.

  3. Restart the system to disable the overlay.
  4. Install the application or update.
  5. Wait for the install to complete and restart the computer if required.
  6. Enable the EWF overlay by typing the following command:ewfmgr c: -enable
  7. Restart the system to re-enable the EWF overlay.