Upgrading Encrypted Computers to Windows 10 from Earlier Versions of Windows with Symantec Endpoint Encryption 11.0.1 MP1 and Later
Article ID: 178683
Updated On:
Products
Issue/Introduction
Important Note: Symantec Encryption Products no longer require using upgrade scripts and and is now fully automatic. All Windows Automatic updates can be installed automatically via Windows Updates that are pulled down.
If you are deploying Windows updates with a deployment solution, such as Altiris/IT Management Suite, these two articles will provide you the proper command to deploy Windows 10 updates on encrypted systems:
How to automatically upgrade Windows 10 systems encrypted with Symantec Endpoint Encryption 11
https://knowledge.broadcom.com/external/article/179265
How to automatically upgrade Windows 10 systems encrypted with Symantec Encryption Desktop 10.4.2
https://knowledge.broadcom.com/external/article/179262
Resolution
Important Note: Symantec Encryption Products no longer require using upgrade scripts and and is now fully automatic. All Windows Automatic updates can be installed automatically via Windows Updates that are pulled down.
If you are deploying Windows updates with a deployment solution, such as Altiris/IT Management Suite, these two articles will provide you the proper command to deploy Windows 10 updates on encrypted systems:
How to automatically upgrade Windows 10 systems encrypted with Symantec Endpoint Encryption 11
https://knowledge.broadcom.com/external/article/179265
How to automatically upgrade Windows 10 systems encrypted with Symantec Encryption Desktop 10.4.2
https://knowledge.broadcom.com/external/article/179262
#################Historical Content Below#################
You can use the Symantec-provided upgrade scripts to upgrade your 32-bit and 64-bit client computers to Microsoft Windows 10 without decrypting and re-encrypting your drives. The scripts support upgrades from the following Microsoft Windows operating systems:
- Windows 7
- Windows 8
- Windows 8.1
- Windows 10 original RTM release (July 15, 2015)
The scripts upgrade Windows 10 to Windows 10 November Update (Version 1511). The November Update is a full OS upgrade and not a patch release, so an in-place OS upgrade is performed.
This document includes two command-line scripts within a compressed archive.
Note: The procedures are identical for Symantec Endpoint Encryption version 11.0.1 MP1 and version 11.1.x, but you use different sets of scripts. Make sure you download the correct ZIP file attachment.
Important: If you are using the Opal/Hardware-encrypt feature, do not use the scripts to upgrade. Instead, follow these steps:
- Decrypt the Opal drive.
- Uninstall Symantec Endpoint Encryption 11.
- Use the Windows 10 upgrade media to perform the upgrade.
- Perform all needed Windows updates.
- Reinstall Symantec Endpoint Encryption 11.
Note: To download the script, click the Download Files section of this article.
This article includes a limited number of upgrade scenarios. Administrators can customize the documented procedures to meet their organizations’ requirements. Symantec recommends testing the script prior to deployment to ensure that the script meets the needs of your business environment, including any installed third-party applications. Testing the script also confirms that all of your customizations and configuration changes work as expected.
For information about troubleshooting Deployment Image Servicing and Management (DISM) and other Microsoft tools and utilities, refer to the Microsoft documentation.
For information on how to upgrade to Windows 10 with Symantec Encryption Desktop 10.3.2 MP10 and above, see article HOWTO119349.
For information on how to upgrade to Windows 10 Anniversary Update with Symantec Endpoint Encryption, see article HOWTO125875.
The compressed archive includes the following upgrade scripts:
| Script | Description |
| build-win-upgrade-media-see11.cmd | This script only creates a modified Windows Imaging File Format (WIM) file. You copy and run this modified file according to your own process. You can store this image file on a CD, DVD, USB flash drive, or network drive and reuse it to upgrade multiple computers. See Building a modified WIM file with the build-win-upgrade script below. |
| win10-upgrade-see11.cmd | This script creates a modified Windows Imaging Format (WIM) file. It then copies the file and launches it to begin the upgrade process automatically. You must run this script locally or on an external hard drive of the computer that you want to upgrade. You cannot run this script from a network drive or USB flash drive. See Running an upgrade with the win10-upgrade script below. |
System requirements for using the Windows 10 upgrade scripts:
- 32-bit or 64-bit Microsoft Windows 7, 8, 8.1, 10 original RTM (July 15)
- Symantec Endpoint Encryption 11.0.1 MP1 or 11.1.x
- The Microsoft Windows Installation Media
Note: You must have administrator and write access to run the upgrade.
- At least 10 GB of available disk space to upgrade to Windows 10
- At least 15 GB of available disk space to run the upgrade script
Only 5 GB is required if you only build the modified-install.wim file.
- .WIM files are necessary in order to use the upgrade scripts. .ESD files do not currently work with the upgrade scripts.
Before you begin
- Unmount all virtual media.
- Make sure that the system sleep timer is not set less than one hour.
Warning: Make sure that you back up your system before you attempt this process.
Note: The computer must restart several times during the upgrade. You must authenticate each time that the computer restarts. However, you can bypass the authentication if you enable a preboot bypass. Symantec recommends that you configure at least three preboot bypasses so that the upgrade proceeds without requiring authentication after every restart. If you do not utilize all of the preboot bypasses, make sure to disable any unused bypasses when the upgrade is completed.
You must use the Autologon feature to allow multiple reboots without requiring preboot authentication.
Building a modified WIM file with the build-win-upgrade script
To build a modified WIM file with the build-win-upgrade script:
- Copy the compressed archive onto the local disk that has Symantec Drive Encryption installed.
Note: Make sure that the destination folder name does not contain any spaces. - Extract the compressed archive.
- Locate the install.wim file on your Microsoft Windows Installation Media. This file is usually located in the sources folder.
- Run the following command:
build-win-upgrade-media-see11.cmd x86|x64 <path-to-install.wim> - At the prompt, select your Microsoft Windows version. If all operations are successful, you can locate a customized WIM in the modified-install.wim file.
- Replace install.wim on your Windows Installation Media with the customized modified-install.wim file.
Running an upgrade with the win10-upgrade script
To run an upgrade with the win10-upgrade script:
- Make sure that you have write access to the Microsoft Windows 10 Installation Media. If you use a CD/DVD or a USB flash drive, copy all of the contents to a local drive or external drive first.
- Copy the compressed archive onto the client computer that you want to upgrade.
Note: Make sure that the destination folder name does not contain any spaces. - Extract the compressed archive.
- Open an administrator command prompt and navigate to the folder in which you extracted the upgrade scripts.
- Run the following command:
win10-upgrade-see11.cmd <path to the directory containing the Windows installer> - At the prompt, select your Microsoft Windows version.
If all operations are successful, the Windows 10 license dialog is displayed. Complete the wizard to finish the upgrade.
Troubleshooting
If you encounter an error while using either of the upgrade scripts, execute the following command in the Windows Assessment and Deployment Kit (Windows ADK) command prompt before you attempt an upgrade again. This command removes any residual files from the previous upgrade attempt.dism /Cleanup-Wim
Keywords:
Upgrading to Windows 10
How to upgrade to Windows 10
Upgrading Encrypted Systems to Windows 10
Upgrading Encrypted Computers to Windows 10
Attachments
Feedback
