Upgrading Encrypted Computers to Windows 10 from Earlier Versions of Windows with Symantec Encryption Desktop 10.3.2 MP10 and later
Article ID: 178684
Updated On:
Products
Issue/Introduction
Important Note: Symantec Encryption Products no longer require using upgrade scripts and and is now fully automatic. All Windows Automatic updates can be installed automatically via Windows Updates that are pulled down.
If you are deploying Windows updates with a deployment solution, such as Altiris/IT Management Suite, these two articles will provide you the proper command to deploy Windows 10 updates on encrypted systems:
How to automatically upgrade standalone Windows 10 systems encrypted with Symantec Endpoint Encryption 11
https://knowledge.broadcom.com/external/article/179265
How to automatically upgrade standalone Windows 10 systems encrypted with Symantec Encryption Desktop 10.4.2
https://knowledge.broadcom.com/external/article/179262
Resolution
Important Note: Symantec Encryption Products no longer require using upgrade scripts and and is now fully automatic. All Windows Automatic updates can be installed automatically via Windows Updates that are pulled down.
If you are deploying Windows updates with a deployment solution, such as Altiris/IT Management Suite, these two articles will provide you the proper command to deploy Windows 10 updates on encrypted systems:
How to automatically upgrade Windows 10 systems encrypted with Symantec Endpoint Encryption 11
https://knowledge.broadcom.com/external/article/179265
How to automatically upgrade Windows 10 systems encrypted with Symantec Encryption Desktop 10.4.2
https://knowledge.broadcom.com/external/article/179262
#################Historical Content Below#################
You can use a Symantec-provided upgrade script to upgrade your 32-bit and 64-bit client computers to Microsoft Windows 10 without decrypting and re-encrypting your drives.
The script supports upgrades from the following Microsoft Windows operating systems:
- Windows 7
- Windows 8
- Windows 8.1
- Windows 10 original RTM release (July 15, 2015)
The script upgrades Windows 10 to Windows 10 November Update (Version 1511). The November Update is a full OS upgrade and not a patch release, so an in-place OS upgrade is performed.
There are two command-line scripts that are included within a compressed archive that is provided with this article.
Note: To download the script, click the Download Files section of this article.
Note: This article includes a limited number of upgrade scenarios. Administrators can customize the documented procedures to meet their organizations’ requirements. Symantec recommends testing the script prior to deployment to ensure that the script meets the needs of your business environment, including any installed third-party applications. Testing the script also confirms that all of your customizations and configuration changes work as expected.
For information about troubleshooting Deployment Image Servicing and Management (DISM) and other Microsoft tools and utilities, refer to the Microsoft documentation.
There is a known issue for systems upgrading from Windows 10 to Windows 10 Version 1511. These are major upgrades and currently must be decrypted before upgrading. For more information on this issue, see article TECH234498.
*For information on how to upgrade to Windows 10 for Symantec Endpoint Encryption 11.0.1 MP1 and later, see article HOWTO119348.
*For information on how to upgrade to Windows 10 Anniversary Update with Symantec Endpoint Encryption, see article HOWTO125875.
*Symantec Encryption Desktop 10.3.2 MP10 and above do not currently support in-place or seamless upgrades. Please check back for more information as this functionality is currently being reviewed.
The following table includes the upgrade script (in compressed format) for Symantec Encryption Desktop 10.3.2 MP10 or later:
| Script | Description |
| build-win-upgrade-media-sde 10.3.2.cmd | This script only creates a modified Windows Imaging Format (WIM) file. You copy and run this modified file according to your own process. You can store this image file on a CD, DVD, USB flash drive, or network drive and reuse it to upgrade multiple computers. See Building a modified WIM file with the build-win-upgrade script. |
| win10-upgrade-sde10.3.2.cmd | This script creates a modified Windows Imaging Format (WIM) file. It then copies the file and launches it to begin the upgrade process automatically. You must run this script locally or on an external hard drive of the computer that you want to upgrade. You cannot run this script from a network drive or USB flash drive. See Running an upgrade with the win10-upgrade script. |
The following table includes the upgrade script (in compressed format) for Symantec Encryption Desktop 10.4.0:
| Script | Description |
| build-win-upgrade-media-sde 10.4.0.cmd | This script only creates a modified Windows Imaging File Format (WIM) file. You copy and run this modified file according to your own process. You can store this image file on a CD, DVD, USB flash drive, or network drive and reuse it to upgrade multiple computers. See Building a modified WIM file with the build-win-upgrade script. |
| win10-upgrade-sde10.4.0.cmd | This script creates a modified Windows Imaging Format (WIM) file. It then copies the file and launches it to begin the upgrade process automatically. You must run this script locally or on an external hard drive of the computer that you want to upgrade. You cannot run this script from a network drive or USB flash drive. See Running an upgrade with the win10-upgrade script. |
System requirements for using the Windows 10 upgrade scripts:
- 32-bit or 64-bit Microsoft Windows 7, 8, 8.1, 10 original RTM (July 15, 2015) operating system is installed.
- Symantec Encryption Desktop 10.4 / 10.3.2 MP10 or a later version is installed.
- The Microsoft Windows Installation Media. You must have administrator and write access to run the upgrade.
- At least 10 GB of available disk space to upgrade to Windows 10.
- At least 15 GB of available disk space to run the upgrade script. Only 5 GB is required if you only build the modified-install.wim file.
- .WIM files are necessary in order to use the upgrade scripts. ESD files do not currently work with the upgrade scripts.
Before you begin
- Unmount all virtual media.
- Make sure that the system sleep timer is set to no less than one hour.
Warning: Make sure that you back up your system before you attempt this process.
Note: The computer must restart several times during and upgrade. You must authenticate each time that the computer restarts. However, you can bypass the authentication if you enable a preboot bypass.
Symantec recommends that you configure at least five preboot bypasses so that the upgrade proceeds without requiring authentication after every restart. If you do not utilize all of the preboot bypasses, make sure to disable any unused bypasses when the upgrade is completed.
For information about configuring the preboot bypasses, see article TECH171485.
Building a modified WIM file with the build-win-upgrade script
To build a modified WIM file with the build-win-upgrade script
- Make sure that the PGPTray.exe process is not running.
- Copy the compressed archive onto the local disk that has Symantec Drive Encryption installed.
Note: Make sure that the destination folder name does not contain any spaces.
- Extract the compressed archive.
- Locate the install.wim file on your Microsoft Windows Installation Media. This file is usually located in the sources folder.
- Run the following command:
For Symantec Encryption Desktop 10.3.2 MP10 or later: build-win-upgrade-media-sde10.3.2.cmd x86|x64 <path-to-install.wim>
For Symantec Encryption Desktop 10.4.0: build-win-upgrade-media-sde10.4.0.cmd x86|x64 <path-to-install.wim>
- At the prompt, select your Microsoft Windows version. If all operations are successful, you can locate a customized WIM in the modified-install.wim file.
- Replace the install.wim on your Windows Installation Media with the customized modified-install.wim file.
Note: If you want to use the modified WIM file to upgrade to Windows 10 on a different Symantec Encryption Desktop encrypted system, you must do the following:
- Exit PGP Services before running the Windows Installation Media
- Execute the Windows setup.exe file with the following command-line option as shown:
setup.exe /ResizeRecoveryPartition Disable
Running an upgrade with the win10-upgrade script
To run an upgrade with the win10-upgrade script
- Make sure that you have write access to the Microsoft Windows 10 Installation Media. If you use a CD/DVD or a USB flash drive, copy all of the contents to a local drive or external drive first.
- Copy the compressed archive onto the client computer that you want to upgrade.
Note: Make sure that the destination folder name does not contain any spaces.
- Extract the compressed archive.
- Open an administrator command prompt and navigate to the folder in which you extracted the upgrade scripts.
- Run the following command:
For Symantec Encryption Desktop 10.3.2 MP10 or later: win10-upgrade-sde10.3.2.cmd <path to the Windows installer>
For Symantec Encryption Desktop 10.4.0: win10-upgrade-sde10.4.0.cmd <path to the Windows installer>
- At the prompt, select your Microsoft Windows version. If all operations are successful, the Windows 10 license dialog is displayed. Complete the wizard to finish the upgrade.
Troubleshooting
If you encounter an error while using either of the upgrade scripts, execute the following command in the Windows Assessment and Deployment Kit (Windows ADK) command prompt before you attempt an upgrade again. This command removes any residual files from the previous upgrade attempt.
dism /Cleanup-Wim
Known issues
- Windows 10 systems fail to resume from hibernation: After upgrading your system to Windows 10, Windows restarts instead of resuming from hibernation. [3818577]
- Software incompatibility with Dropbox and Symantec Encryption Desktop 10.3.2 MP10 for Windows: Symantec Encryption Desktop 10.3.2 MP10 for Windows is not compatible with the latest available versions of Dropbox.
Note: Starting from Symantec Encryption Desktop 10.4.0, Dropbox version 3.16.1 is compatible.
Keywords:
Upgrading to Windows 10
How to upgrade to Windows 10
Upgrading Encrypted Systems to Windows 10
Upgrading Encrypted Computers to Windows 10
Additional Information
Attachments
Feedback
