Upgrade Drive encryption modules from ePO (minor versions)

[kylekat]

I'm finding it extremely odd that i cant find this in the product guide or in any other posts. I want to upgrade my clients from version DE version 7.2.5.24 to 7.2.8.4

I saw guides for all things windows 10 updates, migration from older versions of DE to DE 7.2, but nothing about minor upgrades.

I am uing a test laptop to literally deploy a task with the newer version of the modules to an encrypted system with the older version of the modules. So far so good but wanted to confirm:

1. Is task deployment from ePO of DE agent for windows and DE for windows modules the recommedned way to upgrade encrypted laptops?
2. Should I use the same order as with the standard deployment? Agent first and Drive Encryption second?
3. Can the system restart be avoided on the system?

If anybody has answers, or even better... documentation on this... I'd appreciate your time.

[kylekat]

I deployed the way I described to 5 systems so far without any hicups. It does require restart tho. I would love to have confirmation though that this is the recommended method.

[sw41]

(following because I have the same upgrade needing to happen)

[mlajoie]

We use a third-party software deployment tool to upgrade MDE.  We do it in the middle of the night and force a reboot - with a command to bypass preboot.  This has proven to be successful countless time.  Hope that helps.

[kylekat · Accepted solution]

I would have thought that this was the easiest and simplest question in the universe to answer but nobody in Mcafee bothered to confirm or deny anything.

I been deploying via "Automatic tasks" from ePO simply installing it "on top" on most systems for several weeks and found no issues. Got no choice other than assuming that this is the way to go and intended process to follow.