How to upgrade the operating system to Windows 10 with File and Removable Media Protection installed
Technical Articles ID:
KB87550
Last Modified: 2/11/2020
Environment
McAfee File and Removable Media Protection (FRP) 5.x
Microsoft Windows 10 (all supported releases)
For details of FRP supported environments, see KB81149. Summary
This article helps customers to upgrade their operating system to Windows 10, when FRP is installed. The following upgrade information is included:
- Windows 7, 8, 8.1 to Windows 10.
- Windows 10 (version 1511) to Windows 10 Anniversary Update or a later release.
IMPORTANT:
- Failure to follow the instructions outlined in this article causes the Windows 10 upgrade to fail and roll back. The failure can occur when FRP is installed, and encrypted files are on the system.
- You must follow this process because encryption keys are not available during the upgrade, so authentication to FRP is not possible. FRP typically blocks open and read operations on encrypted files, which in turn blocks the Windows upgrade. The operating system must be able to open and read encrypted files, and back up and restore them for the Windows upgrade to succeed.
Known Issues
- Reference: FRP–4767
- Description: A known issue exists which prevents Windows 10 upgrades on systems that have FRP installed.
- Resolution: Fixed in FRP 5.2.0.
To view all FRP known and resolved issues, see KB85807.
McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.
NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.
Solution
IMPORTANT:
- Upgrade to a supported version of FRP before you upgrade the operating system to Windows 10, or from one Windows 10 version to a later version.
- Supported FRP versions are available in the FRP supported environments article, referenced in the Environment field of this article.
NOTES:
- All encrypted files must be treated as simple binary files to allow a file open or read operation to succeed without a key being present. The binary files are files that FRP does not intercept or decrypt.
- To configure FRP to treat all encrypted files as simple binary files, specify a sequence of Advanced Debug Options. These options instruct FRP to treat files on all drives as simple binary files.
- When the options are set, FRP does not decrypt or encrypt any files, and FRP appears to stop working. For general information about Advanced Debug Options, see KB83461.
- FRP must be configured to treat all encrypted files as simple binary files. You must complete this task before the upgrade process to Windows 10 starts.
- You must then reconfigure FRP to explicitly remove these options after the upgrade is successful.
- Before the upgrade process:
- Record which Encryption Options policy is assigned to the system (Original Policy). You must reapply this policy when the upgrade is complete.
- Create an Encryption Options policy, Policy A.
- Enter the following string in the Advanced Debug Options field of the policy:
ESD:1#ENW:1#ENR:1#ENS:1#ENF:1#ERD:1
- Assign Policy A to the system being upgraded, and enforce it.
- To apply these options to the driver, restart the system.
- Upgrade to Windows 10, or from one Windows 10 version to a later version.
- After the upgrade process is successful:
- Create an Encryption Options policy, Policy B.
- Edit the string in the Advanced Debug Options field in the policy, as below:
ESD:-#ENW:-#ENR:-#ENS:-#ENF:-#ERD:-
- To remove the exclusions, apply Policy B to the upgraded system.
NOTE: If you simply leave the Advanced Debug Options string empty, it does not remove these exclusions; they must be explicitly removed as described.
- To apply these settings to the driver, restart the system.
- Reassign the Original Policy to the system and enforce.
IMPORTANT: If you are changing an existing policy, make sure that you note any Advanced Debug Options that are currently defined. Also, reapply them when you have completed step 2 above.
Solution
An alternative method is to remove the FRP product before an upgrade, and reinstall it when the upgrade is complete. Because FRP is not installed on the system during the upgrade process, all encrypted data on the system is preserved. Use the following steps:
- Uninstall FRP from the system being upgraded.
- Upgrade to Windows 10, or from one Windows 10 version to a later version.
- Install FRP.
IMPORTANT: Install a version of FRP that is compatible with the new Windows 10 version. Supported FRP versions are available in the FRP supported environments article, referenced in the Environment field of this article.
- Enforce policies.
|
