How to convert an encrypted disk from MBR to GPT using Microsoft MBR2GPT.EXE and Drive Encryption MdeMbr2GptTool.exe tools

Technical Articles ID: KB89024
Last Modified: 4/24/2020

Environment

McAfee Drive Encryption (DE) 7.x

Microsoft Windows 10 (version 1703) Creators Update and later

For details of DE supported environments, see KB79422.

Summary

The DE MBR to GPT tool (MdeMbr2GptTool.exe) works on Microsoft Windows 10 (version 1703) Creators Update and later (64-bit only). The tool works with the Microsoft MBR2GPT.EXE tool, to convert a software-encrypted DE drive, from Master Boot Record (MBR) to the GUID Partition Table (GPT) partition style, without the need to decrypt the disk. For more information about Microsoft MBR2GPT.EXE, see https://docs.microsoft.com/en-us/windows/deployment/mbr-to-gpt

Package contents details of key files:

Package name - Mbr2GptPackageV2.zip
Extracted location - Mbr2GptPackage\

File	Comments
MdeMbr2GptTool.exe	McAfee MBR to GPT conversion executable.
MdeMbr2Gpt.bat	Batch file to in initiate the conversion.
MfeEEBoot32.efi	32-bit UEFI boot file.
MfeEEBoot64.efi	64-bit UEFI boot file.
HWDefaultProductDetections.xml	Hardware Compatibility XML file.

IMPORTANT:

The tool must be run from an administrator command prompt.
The MdeMbr2GptTool.exe looks for the Hardware Compatibility XML file called HwDefaultProductDetections.xml in the same directory. But, a specific file can be provided with the command-line switch -HWCompatXml using the convert command.

Example: MdeMbr2GptTool convert -HwCompatXml c:\Tools\HWCompat.xml

IMPORTANT: To obtain the latest Hardware Compatibility XML file, see KB81900.
The tool allows conversion of any Windows 10 (version 1703) Creators Update and later from MBR to GPT that is encrypted using DE software encryption. To view supported versions of Windows 10, see KB85784.
The tool only supports 64-bit platforms.
The tool does not support conversion of Opal encrypted systems
Once the Microsoft tool MBR2GPT.EXE has been run, any subsequent failure prevents the system from booting. There is no easy way to recover, even using the DE recovery tool DETech. On any critical system, taking a sector by sector backup, is highly recommended.
The tool only works from the Windows desktop from the system being converted (no WinPE support).
The tool only works on active encrypted systems.

Solution

To use the MdeMbr2Gpt.EXE tool:

IMPORTANT: It is highly recommended on any critical system, to take a sector by sector backup first. Any subsequent failures prevent the system from booting.

Boot into Windows on the target system.
Copy Mbr2GptPackage.zip into a folder on the system. For example, c:\DETOOL.
Open a command prompt as an administrator
1. Click Start.
2. In the Start Search box, type cmd, and then press Ctrl+Shift+Enter.
3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
Change directory by typing:

CD C:\DETOOL
To run the batch file, in the command prompt window type:

MdeMbr2Gpt.bat
Once the batch file has completed, with no errors noted, restart the system
During the boot sequence, enter the BIOS and access the firmware settings.
Change boot type to UEFI and save the changes.
Restart the system.

Workaround

Fully decrypt and uninstall DE before using the Microsoft tool:

NOTE: See the respective DE product guide for assistance.

Configure a policy in ePolicy Orchestrator (ePO) to fully decrypt and deactivate DE.
Configure an ePO deployment task to uninstall DE components.
Perform the steps provided by Microsoft to convert a disk from MBR to GPT and change the firmware to UEFI.

For instructions, see the Microsoft document: https://technet.microsoft.com/en-us/itpro/windows/deploy/mbr-to-gpt
Use an ePO deployment task to install DE components.
To activate and encrypt the clients, enforce a policy.

Related Information

Background details about MBR2GPT.EXE
Microsoft Windows 10 Creators Update and later provides an in-place UEFI conversion tool (MBR2GPT.EXE). The tool allows customers to change their hard drive partition structure from Master Boot Record (MBR) to GUID Partition Table (GPT) without the need to reformat. The tool allows customers to use security features such as Secure Boot and Device Guard that require UEFI. For further details, see the Microsoft document: https://technet.microsoft.com/en-us/itpro/windows/deploy/mbr-to-gpt.

Attachment 1

Mbr2GptPackage_Ver2.zip
1.2MB • < 1 minute @ broadband

Affected Products

Drive Encryption 7.2

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

How to convert an encrypted disk from MBR to GPT using Microsoft MBR2GPT.EXE and Drive Encryption MdeMbr2GptTool.exe tools

Environment

Summary

Solution

Workaround

Related Information

Attachment 1

Affected Products

Languages:

Title

Title

Knowledge Center

How to convert an encrypted disk from MBR to GPT using Microsoft MBR2GPT.EXE and Drive Encryption MdeMbr2GptTool.exe tools

Environment

Summary

Solution

Workaround

Related Information

Attachment 1

Affected Products

Languages:

Choose your region

Title

Title