Loading...

Knowledge Center


How to upgrade the operating system to Windows 10 with Drive Encryption 7.2.1 or later installed
Technical Articles ID:   KB89000
Last Modified:  6/4/2019
Rated:


Environment

McAfee Drive Encryption (DE) 7.2.1 or later

Microsoft Windows 10 version 1903 (May 2019 Update)
Microsoft Windows 10 version 1809 (October 2018 Update)
Microsoft Windows 10 version 1803 (April 2018 Update)
Microsoft Windows 10 version 1709 (Fall Creators Update)
Microsoft Windows 10 version 1703 (Creators Update)
Microsoft Windows 10 version 1607 (Anniversary Update)



For details about the supported DE environments, see KB79422.

Summary

Recent updates to this article:
 
Date Update
November 27, 2018 In Solution 1, extended the warning statement for "Do not change or remove the ReflectDrivers option in the file SetupConfig.ini."
October 16, 2018 Added an entry to the IMPORTANT statement to cover an issue when the SetupConfig.ini file is empty.
May 29, 2018 Added Windows 10 version 1803 (April 2018 Update).

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.


This article provides the steps and scripts to support customers who want to upgrade to Windows 10 Anniversary Update and later. The support is provided for systems using DE 7.2.1 or later.

Two solutions are described:


Solution 1 - Managed deployment
This solution is for those organizations that roll out Windows updates manually, for example, for organizations that use the Microsoft System Center Configuration Manager (SCCM) or other deployment tools.

Solution 2 - Zero-touch - automatic updates
This solution is for those organizations that allow endpoints to update automatically from Microsoft update servers, or WSUS.

Upgrades are supported from the following operating systems to Windows 10 operating systems. The systems can be configured to use either a Basic Input/Output System (BIOS), or Unified Extensible Firmware Interface (UEFI) system:
  • Windows 7
  • Windows 8.0
  • Windows 8.1
  • Windows 10 version 1507 (General Availability)
  • Windows 10 version 1511 (November Update)
  • Windows 10 version 1607 (Anniversary Update)
  • Windows 10 version 1703 (Creators Update)
  • Windows 10 version 1709 (Fall Creators Update)
  • Windows 10 version 1803 (April 2018 Update)
  • Windows 10 version 1809 (October 2018 Update)

IMPORTANT:
  • On systems where DE has been deactivated, you might need to manually delete SetupConfig.ini, if the file is empty. The empty SetupConfig.ini has been found to cause the following failure message: "Windows Update failure (0x80070490)”
  • DE 7.2.1 or later must be in place before you start the upgrade to Windows 10 Anniversary Update or later.
  • Support for Opal upgrades is not available.
  • You must download the Windows 10 ISO from the Microsoft Volume Licensing Service Center (VLSC) site.
    WARNING: The steps contained in this article can't be used with the Windows 10 ISO from the public Microsoft download site.
  • You must complete the procedure in this article before you perform the upgrade to Windows 10 Creators Update.
    WARNING: If you perform the upgrade without first following the instructions in this article, Windows fails to boot correctly. In this situation the following two options will be shown after the first system restart:
    • Troubleshoot the problem
    • Turn off your PC
If Windows fails to boot, select the option Turn off your PC. When the computer is turned on again, Windows has rolled back to the previous operating system state, before the upgrade attempt.
  • During the upgrade process, Windows performs two system restarts. We recommend that you allow these two restarts to occur. The system restarts are part of the upgrade process. You can opt to use the DE temporary autoboot feature to disable preboot during these restarts and make the upgrade process more streamlined.
McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Solution

Managed deployments
Upgrade steps when managing a deployment of a Windows update using Windows 10 ISO:

Option 1 - Using the /ReflectDrivers switch:
  1. From the administrator command line or deployment script, locate the image and use the following command:

    Setup.exe /ReflectDrivers "%programfiles%\McAfee\Endpoint Encryption\OSUpgrade"

    OR

    Setup.exe /ReflectDrivers "C:\Program Files\McAfee\Endpoint Encryption\OSUpgrade"
     
  2. Complete the Windows 10 setup procedure as needed.

Option 2 - Using the /ConfigFile switch:
  1. From the administrator command line or deployment script, locate the image and use the following command:

    Setup.exe /ConfigFile <path to Setupconfig.ini>

    Where the path to Setupconfig.ini is "%systemdrive%\Users\Default\AppData\Local\Microsoft\Windows\WSUS\SetupConfig.ini"
     
  2. Complete the Windows 10 setup procedure as needed.

WARNING: Do not change or remove the ReflectDrivers option when you edit the SetupConfig.ini. This option is automatically configured by Drive Encryption and is needed for operating system upgrades to complete successfully.

Solution

Zero-touch - automatic updates
Upgrade of Windows via the Windows Server Update Service (WSUS):

No action or intervention is needed.

DE 7.2.1 adds the path of the drivers and the ReflectDrivers option to setupconfig.ini automatically during upgrade or activation. Windows Update reads this file and applies the settings in the background while it installs the Windows update.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.