Update Guide: Full Disk Encryption
Full Disk Encryption Update Guide
- Manual Upgrade
- Unattended Upgrade
Manual Upgrade
The following steps detail the manual installation of the software-based FDE components:
- Customizing: If you have created a new DMI file for unusual computer configurations then place the dmi.ini file in the same directory as the Matrix42 Full Disk Encryption [version].msi package so that computers set for ‘Hardware Compatibility Mode’ will automatically be installed accordingly. For details about Hardware Compatibility Mode, see Matrix42 FDE - Administration and Usage Guide.
- Double-click the file Matrix42 FDE by Matrix42 Setup.exe.
The GUI language will be automatically selected by the installer to fit that of the operating system. If you have an operating system other than English, German, or Hungarian, the default language – English – will be installed..
Be aware that you will need to reboot the computer after the upgrade is complete.
- The Welcome dialog appears.
- Click Next.
- The Administration password dialog appears.
- Enter the password and click Next.
- The Ready to Upgrade dialog appears.
- Click Upgrade.
- The Upgrading Matrix42 FDE status dialog appears. Let the installer upgrade the components (this may take a few minutes).
- Once FDE is upgraded, the Upgrade Complete dialog appears
- Press Finish to to restart the computer
A reboot is necessary after the initialization of the PBA component to capture user credentials and apply the new settings. Please uninstall FDE immediately if PBA initialization fails for any reason. In other words, do not shutdown the system unless an ERI file was successfully generated. Given the logic in the current product it is possible that the FDE.x drive is locked in such a case.
Unattended Upgrade
This section details steps to upgrade from one major version to another. The same procedure is applicable for upgrading it within a major version.
- Open a command prompt and navigate to the directory in which the Matrix42 FDE setup files are located. There are two similar methods to upgrade that differ only in that you can choose to enter the administration password into the command line in plain text or in encrypted form.
- Follow the method that is best for you:
Using plaintext password
- Open a command prompt and enter the following syntax into the command line:
msiexec.exe /i "<full MSI file path, name, and extension>" ADMINPWD=<Matrix42 FDE administration password> /l* "<logfile location\logfile name.txt>" /passive /forcerestart
- For example:
msiexec.exe /i "C:\FDE files\Matrix42 Full Disk Encryption by Matrix42 [version].msi" ADMINPWD=12345678 /l* "C:\log files\FDE update.log" /passive /forcerestart
Using encrypted upgrade policy
To upgrade Matrix42 Full Disk Encryption using an encrypted administration password, you must first create an upgrade policy via either the Upgrade Policy Builder (or the helper application GUS.exe (Matrix42 FDE - Administration and Usage Guide). Press Return when you are done.
- Save the policy to a common location accessible by the installer.
- Navigate to the directory where the Matrix42 Full Disk Encryption package is located.
- Start the update upgrade procedure by entering the following in the command line:
msiexec.exe /i "<full MSI path, name, and extension>" UPGDPOLICY="<full policy path, name, and extension>" /l* <logfile location\logfile name.txt> /passive /forcerestart
For example:
msiexec.exe /i "C:\FDE versions\Matrix42 Full Disk Encryption by Matrix42 [version].msi" UPGDPOLICY="C:\update.upd" /l* "C:\FDE.log" /passive /forcerestart
Make sure that you enter the correct package in the command line for the operating system you intended to deploy to –32 or 64-bit? The 32-bit version of Matrix42 FDE CANNOT be installed on 64-bit versions of Windows, and vice versa. It is recommended to restart the computer once an upgrade is complete. This will allow the new encryption driver to be loaded into Windows (this cannot be done until a restart has taken place). Because a restart is not mandatory, make use of the options /forcerestart or /promptrestart to force a restart.
Command line parameters for upgrade
| Command line option / property | Details |
|---|---|
|
ADMINPWD |
This option allows you to provide the administration password for the current installation. For example: ADMINPWD=12345678 If you do not use this option, the administration password must be entered when prompted by the installer. |
|
UPGDPOLICY |
This option allows you to enter the path and policy name to an upgrade policy (created using either the Upgrade Policy Builder or the helper application GUS.exe (Matrix42 FDE Administration and Usage Guide)). The syntax is: UPGDPOLICY=<full policy path, name, and extension> For example: UPGDPOLICY="C:\update.upd" |
|
WMIQUERY (Advanced users only) |
Enable/Disable WMI queries made by the installer. Under certain rollout scenarios in which no remote administrator permissions have been granted, you can disable WMI querying made by the installer.
NOTE: Turning off WMI querying will only work with certain hardware! |
|
forcerestart, promptrestart |
Use either of these commands to force a restart after the upgrade procedure is complete (recommended). |
The ‘Rollback’ takes place only when anything fails during the upgrade procedure, then the installer will roll back the installation files so that the system is unaffected and remains with previous version. The installer also gives out an appropriate message.