Knowledge Center

IMPORTANT:

• Upgrade to a supported version of FRP before upgrading the OS to Windows 10, or from one Windows 10 version to a later version.
• To view the supported FRP versions, look at the FRP supported environments article, included above in the Environment field.

NOTES:

• To permit a file open/read operation to succeed without a key being present, all encrypted files need to be treated as simple binary files that FRP will not intercept/decrypt.
• FRP can be configured to treat all encrypted files as simple binary files, by specifying a sequence of Advanced Debug Options. Specifying these options instructs FRP to treat files on all drives as simple binary files.
• When the options are set, FRP does not decrypt or encrypt any files, and FRP appears to stop working. For general information about Advanced Debug Options, see KB83461.
• FRP must be configured to treat all encrypted files as simple binary files before the upgrade process to Windows 10 starts.
• FRP must then be reconfigured to explicitly remove these options after the upgrade is successful.

1. Before the upgrade process:
   1. Record which Encryption Options policy is assigned to the system (Original Policy); you need to reapply this policy when the upgrade is complete.
   2. Create an Encryption Options policy, Policy A.
   3. Enter the following string in the Advanced Debug Options field of the policy:
      
      ESD:1#ENW:1#ENR:1#ENS:1#ENF:1#ERD:1
       
   4. Assign Policy A to the system being upgraded, and enforce.
   5. To apply these options to the driver, restart the system.
   6. Upgrade to Windows 10, or from one Windows 10 version to a later version.
2. After the upgrade process is successful:
   1. Create an Encryption Options policy, Policy B.
   2. Edit the string in the Advanced Debug Options field in the policy, as below:
      
      ESD:-#ENW:-#ENR:-#ENS:-#ENF:-#ERD:-
   3. To remove the exclusions, apply Policy B to the upgraded system.
      
      NOTE: Simply leaving the Advanced Debug Options string empty does not remove these exclusions; they must be explicitly removed as described.
   
   
   4. To apply these settings to the driver, restart the system.
   5. Reassign the Original Policy to the system and enforce.

Removing the FRP product before an upgrade, and reinstalling when the upgrade is completed, is an alternative method with the same result. Because FRP is not installed on the system during the upgrade process, all encrypted data on the system is preserved. Implement this solution by following these steps:

1. Uninstall FRP from the system being upgraded.
2. Upgrade to Windows 10, or from one Windows 10 version to a later version.
3. Install FRP.
   IMPORTANT: Install a version of FRP that is compatible with the Windows 10 version. To view the supported FRP versions, look at the FRP supported environments article, included above in the Environment field.
4. Enforce policies.