How to upgrade the operating system to Windows 10 with File and Removable Media Protection installed
Technical Articles ID:
KB87550
Last Modified: 2023-01-10 10:16:40 Etc/GMT
Environment
File and Removable Media Protection (FRP) 5.x
Summary
This article helps customers to upgrade their operating system to Windows 10, when FRP is installed. The following upgrade information is included:
- Windows 7, 8, 8.1 to Windows 10.
- Windows 10 (version 1511) to Windows 10 Anniversary Update or a later release.
IMPORTANT:
- Failure to follow the instructions outlined in this article causes the Windows 10 upgrade to fail and roll back. The failure can occur when FRP is installed, and encrypted files are on the system.
- You must follow this process because encryption keys are not available during the upgrade, so authentication to FRP isn't possible. FRP typically blocks open and read operations on encrypted files, which in turn blocks the Windows upgrade. The operating system must be able to open and read encrypted files, and back up and restore them for the Windows upgrade to succeed.
Known Issues
Solution
1
IMPORTANT:
- Upgrade to a supported version of FRP before you upgrade the operating system to Windows 10, or from one Windows 10 version to a later version.
- Supported FRP versions are available in the FRP supported environments article, referenced in the "Environment" field of this article.
NOTES:
- All encrypted files must be treated as simple binary files to allow a file open or read operation to succeed without a key being present. The binary files are files that FRP doesn't intercept or decrypt.
- To configure FRP to treat all encrypted files as simple binary files, specify a sequence of Advanced Debug Options. These options instruct FRP to treat files on all drives as simple binary files.
- When the options are set, FRP doesn't decrypt or encrypt any files, and FRP appears to stop working. For details, see KB83461 - Advanced debug and configuration options for File and Removable Media Protection.
- FRP must be configured to treat all encrypted files as simple binary files. You must complete this task before the upgrade process to Windows 10 starts.
- You must then reconfigure FRP to explicitly remove these options after the upgrade is successful.
- Before the upgrade process:
- Record which Encryption Options policy is assigned to the system (Original Policy). You must reapply this policy when the upgrade is complete.
- Create an Encryption Options policy, Policy A.
- Enter the following string in the Advanced Debug Options field of the policy:
ESD:1#ENW:1#ENR:1#ENS:1#ENF:1#ERD:1
- Assign Policy A to the system being upgraded, and enforce it.
- To apply these options to the driver, restart the system.
- Upgrade to Windows 10, or from one Windows 10 version to a later version.
- After the upgrade process is successful:
- Create an Encryption Options policy, Policy B.
- Edit the string in the Advanced Debug Options field in the policy, as below:
ESD:-#ENW:-#ENR:-#ENS:-#ENF:-#ERD:-
- To remove the exclusions, apply Policy B to the upgraded system.
NOTE: If you simply leave the Advanced Debug Options string empty, it doesn't remove these exclusions; they must be explicitly removed as described.
- To apply these settings to the driver, restart the system.
- Reassign the Original Policy to the system and enforce.
IMPORTANT: If you're changing an existing policy, make sure that you note any Advanced Debug Options that are currently defined. Also, reapply them when you've completed step 2 above.
Solution
2
An alternative method is to remove the FRP product before an upgrade, and reinstall it when the upgrade is complete. Because FRP isn't installed on the system during the upgrade process, all encrypted data on the system is preserved. Perform the following steps:
- Uninstall FRP from the system being upgraded.
- Upgrade to Windows 10, or from one Windows 10 version to a later version.
- Install FRP.
IMPORTANT: Install a version of FRP that's compatible with the new Windows 10 version. Supported FRP versions are available in the FRP-supported environments article, referenced in the "Environment" field of this article.
- Enforce policies.
|
