Deployment Guide for OCI Secure Desktops
An OCI (Oracle Cloud Infrastructure) secure desktop image refers to a pre-configured virtual machine image that is designed to provide a secure and isolated desktop environment within the Oracle Cloud Infrastructure platform. This image is typically used for remote access and desktop virtualization scenarios where security and isolation are important considerations.
Prerequisites for OCI Secure Desktops :
VCN & Subnet for Desktop connections
Create Desktop User groups
Setting up IAM policies
Customized Desktop Image
Let's start with prerequisites :
To start with OCI you should have OCI Tenancy ready. For setting up OCI tenancy , please follow this link :
Next we need to setup OCI Compartment :
Set up the compartments required by Secure Desktops to control access to desktop pools. Work with the desktop administrator to understand which compartments are required. Use compartments to control access to desktops. For example, you are likely to need one compartment per desktop pool, and there will be multiple desktop pools.
My Compartment : "testvdi"
Let's Create VCN and Subnet :
Go to menu , select VCN in Networking :
In VCN i have created Desktop subnet :
Start with Dynamic Group creation , Go to Menu select Identity & Security , Choose Domains option in Identity
Select domain, in My case i have Default Domain :
After selecting Domain we need to create Static and Dynamic Group :
Desktop-Users : To access Desktop
Administrators : For Desktop pool or resource Creation
I have created Rule in which i have added Resource type 'Desktoppool' in my compartment:
Now we need to configure policies on Root compartment or Compartment above testvdi. In my case i have applied policies on root Compartment:
Now we are ready with all groups and policies.
Creation of Windows 10 Customised Image
In my Lab i have used Windows 10 Evaluation release.
1. Created windows 10 VM in VMware Workstation
2. Install OCI IO drivers. You can download drivers from this link :
3. Install Cloudbase-init. You can download from this link :
4. Then we need to perform OVA export.
5. Once OVA export completed we need to upload in OCI Object storage bucket.
6. Once upload finished we need to import this in Custom images
Image import completed.
Now we need to create Instance with this image , test all functionalities and then run sysprep to make it ready for Desktop instances.
Image ready with these softwares :
Download sysprep utility :
I made few changes in unattend.xml so that it shouldn't ask for New User creation after sysprep.
Right-click Generalize.cmd, and then click Run as administrator.
Wait for few minutes to finish and create custom image again. Please specify following tags as well :
I have created this image which is ready for desktop deployment
Desktop Pool Deployment
Now i am going to deploy New Desktop pool :
Post Creation we need to set this pool state Active
For Launch desktop we need to use URL :
In My case :
Post login with you email ID and password :
Click on Open
You can download Policies and Unattend.xml from this git location :