Unable to apply Windows 10 Major Updates on systems Encrypted with Drive Encryption 10.3.2 MP10 and above or Endpoint Encryption 11.1.0 and above

book

Article ID: 163060

calendar_today

Updated On:

Products

Endpoint Encryption

Issue/Introduction

Important Note: Symantec Encryption Products no longer require using upgrade scripts and and is now fully automatic.  All Windows Automatic updates can be installed automatically via Windows Updates that are pulled down.  

If you are deploying Windows updates with a deployment solution, such as Altiris/IT Management Suite, these two articles will provide you the proper command to deploy Windows 10 updates on encrypted systems:

How to automatically upgrade Windows 10 systems encrypted with Symantec Endpoint Encryption 11
https://knowledge.broadcom.com/external/article/179265


How to automatically upgrade Windows 10 systems encrypted with Symantec Encryption Desktop 10.4.2
https://knowledge.broadcom.com/external/article/179262

 

 

 

 

Windows 10 has a new method of deploying updates that are more significant than a typical update.  These updates are considered "Major" OS upgrades, but can be done "in-place", and without having to reinstall the Operating System or disturb the user experience. Examples of such major upgrades include the Windows 10 November 2015 Update, and the Windows 10 Anniversary Update (released in 2016).

Systems that are encrypted with Symantec Drive Encryption 10.3.2 MP10 or above as well as Symantec Endpoint Encryption 11.1.0 and above will not be able to perform these updates without using the upgrade scripts mentioned below. 

NOTE: It's always recommended to be on the latest version of Symantec Encryption Desktop.  For a listing of current Symantec Product versions, see article TECH187067.
 

Typical Windows Upgrade Scenario:

1. On a Windows 10 system, encrypt the disk using Symantec Drive Encryption 10.3.2 MP12 or Symantec Endpoint Encryption 11.1.0.
2. Attempt to apply the latest Windows 10 major update.

The update does not work, and the system might freeze, forcing you to perform a roll back.

Note: This is expected behavior without using the upgrade scripts mentioned below.

Resolution

Important Note: Symantec Encryption Products no longer require using upgrade scripts and and is now fully automatic.  All Windows Automatic updates can be installed automatically via Windows Updates that are pulled down.  

If you are deploying Windows updates with a deployment solution, such as Altiris/IT Management Suite, these two articles will provide you the proper command to deploy Windows 10 updates on encrypted systems:

How to automatically upgrade Windows 10 systems encrypted with Symantec Endpoint Encryption 11
https://knowledge.broadcom.com/external/article/179265

How to automatically upgrade Windows 10 systems encrypted with Symantec Encryption Desktop 10.4.2
https://knowledge.broadcom.com/external/article/179262

#################Historical Content Below#################

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

You can upgrade from Windows 7, 8, 8.1, and 10 to Windows 10 versions without decrypting the hard drive by using upgrade scripts provided by Symantec. See the appropriate link below:

HOWTO125875  Upgrading Encrypted Computers to the Windows 10 Anniversary Update and later from Earlier Versions of Windows with Symantec Endpoint Encryption 11.1.2 and later
HOWTO119348  Upgrading Encrypted Computers to Windows 10 from Earlier Versions of Windows with Symantec Endpoint Encryption 11.0.1 MP1 and later

HOWTO128174 How to upgrade computers encrypted with Symantec Encryption Desktop to a Windows 10 release
HOWTO125015  Upgrading Encrypted Computers to the Windows 10 Anniversary Update from Earlier Versions of Windows with Symantec Encryption Desktop 10.4.0 MP1 and later
HOWTO119349  Upgrading Encrypted Computers to Windows 10 from Earlier Versions of Windows with Symantec Encryption Desktop 10.3.2 MP10 and later

If using the upgrade scripts is not possible, decrypting the drive will be necessary prior to upgrading the Operating System.