Knowledge Center

How to upgrade the operating system to Windows 10 (Version 1507 and Version 1511/November Update), with Drive Encryption 7.1 Patch 3 Hotfix 1148978 or later, installed
Technical Articles ID:   KB84962
Last Modified:  11/14/2017


McAfee Drive Encryption (DE) 7.1 Patch 3 (7.1.3)

Microsoft Windows 10 (version 1507)
Microsoft Windows 10 (version 1511) - November Update (aka Threshold 2, 1st Update)

For details of DE 7.1.x supported environments, see KB79422.


IMPORTANT: Customers are strongly advised to use the simpler upgrade process documented in the following articles:
  • KB87909 - How to upgrade the operating system to Windows 10 Anniversary Update (Build 1607), with Drive Encryption 7.1 Patch 3 Hotfix 1148978 or later, installed).
  • KB89000 - How to upgrade the operating system to Windows 10 Creators Update or later, with Drive Encryption 7.2.1 or later, installed.

Microsoft provided a new command-line switch, /ReflectDrivers, which is available only in Windows 10 Anniversary Update (Build 1607) and later. This allows drivers to be added to the operating system image, during the setup and installation phase, via configuration file (*.inf).

This article provides the steps and scripts to support customers who want to upgrade to Windows 10 (versions 1507 and 1511), on systems using DE 7.1.3. These instructions apply to DE 7.1.3 RTW and subsequent DE 7.1.3 hotfixes, including DE 7.1.3 Hotfix 1148978. To review the hotfix release notes, see PD26603. The hotfix is available on the Product Downloads site, using a valid grant number.

Upgrades are supported from the following operating systems, that are configured to use either a Basic Input/Output System (BIOS), or Unified Extensible Firmware Interface (UEFI) system:
  • Windows 7
  • Windows 8.0
  • Windows 8.1
  • Windows 10
  • Windows 10 Version 1511
  • Customers who have already successfully upgraded to Windows 10 with DE installed, who now need to upgrade to Windows 10 version 1511 (known as November Update or Threshold 2 [TH2]), must also follow the same process, to inject the DE drivers.
  • Support for Opal upgrades has been temporarily removed from this article.
  • Download the Windows 10 ISO from the Microsoft Volume Licensing Service Center (VLSC) site. The steps in this article will not work for the Windows 10 ISO, from the public Microsoft download site.
  • DE 7.1 Patch 3 must be in place before you start the upgrade to Windows 10, because DE 7.1.2 and earlier releases are not supported on Windows 10.
  • You must complete the following procedure to inject the DE 7.1.3 drivers, before you upgrade to Windows 10. If you perform the upgrade without injecting DE drivers first, after the first reboot, Windows will boot into the recovery mode and display the following two options:
    • Troubleshoot
    • Turn off your PC
At this point, select the option Turn off your PC. When the computer is turned on again, Windows will have rolled back to the previous operating system state, before the upgrade attempt.
NOTE: DEGO deployment to Windows 10 clients fails. For details, see KB85514. This issue is resolved by installing DE 7.1 Patch 3 Hotfix 1131996 (, which is available from the Product Downloads site.
DISCLAIMER: The attached scripts are provided as samples. The scripts should be used only after reviewing and testing in your environment. Customers are responsible for ensuring that the scripts are appropriate to the environment and situation in which they will be used.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.


Inject the DE 7.1.3 drivers into a Windows 10 DVD:
  1. Create a new folder called windows_10 and a sub-directory called DVD on a non-removable disk (for example c:\windows_10\DVD).
  2. Copy everything from the Windows 10 DVD to the sub-directory c:\windows_10\DVD.
  3. From the DETech\WinPE package, copy the following files to the c:\windows_10 folder:
     Use the 32-bit drivers for a 32-bit image, and 64-bit drivers for a 64-bit image. 
    • mfeccde.sys
    • MfeEpePc.sys
    • MfeEpeOpal.sys

      NOTE: Although Opal drives are not currently supported with this process, MfeEpeOpal.sys must still be copied, because it is part of the latest upgrade script.
  4.  Copy the following attached files to the c:\windows_10\ folder:
    • Script.bat
    • Drivers.reg
    NOTE: Script.bat and drivers.reg handle all the steps required to inject DE drivers into a Windows 10 image, and affect both install.wim and winre.wim.
  5. Run the provided script.bat with administrator privileges.

    NOTE: The script will take about 10 minutes to run.

    The \DVD directory now contains all the updates needed to upgrade a client system.
  6. Copy the \DVD subdirectory to a network share that is accessible by the client system you want to upgrade, or place it on a USB drive.
  7. On the DE 7.1.3 client, run setup.exe from the \DVD folder to initiate the Windows 10 upgrade process.

    The Windows 10 upgrade starts by running setup.exe on the client, to complete the upgrade. 

    IMPORTANT: During the upgrade process, Windows will perform two system restarts. We strongly recommend that you allow these two restarts to occur. The system restarts are part of the upgrade process. You can opt to use the DE temporary autoboot feature to disable preboot during these restarts, to make the upgrade process more seamless.


Windows Server Update Services (WSUS) provides control over Windows 10 updates. Customers have been inquiring whether a Windows upgrade is possible with DE installed, using this method. The WSUS process requires a Setupconfig.ini to be configured, and access to several DE files.

Engineering will research this Windows 10 feature and provide an update. Enterprise customers who want to use this method should contact their account manager.

Refer to the following links for details about the Windows Servicing Tools:


1K • < 1 minute @ broadband

Rate this document

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.