[SOLVED] windows11-upgrade and Prim'x

[Vercingetorix]

Good morning,
We are on Enterprise version 2.6.0.16881.
We are trying to migrate our Windows 10 PCs to Windows 11 using the Windows11-upgrade 10.0.22631 package.
Our constraint is that the disks are encrypted using the Cryhod tool.
From the above package, we added the following information to the setup to load the drivers:

Code: Select all

additionnal_cmd = " /ReflectDrivers \"C:\Program Files\Prim'X\Cryhod\drivers\""

We have passed the windows11-requirements package 2024.11.21 | 2024-12-15 21:55

Code: Select all

Auditing wapt-windows11-requirements
OK: TPM chip in version 2.0
OK: Enough space disk available
OK: Enough space disk available
OK: SecureBoot is available and not enabled
OK: Currently 4 cores on your CPU
OK: Currently 1.76GHz
OK: Your processor Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz is compatible

So potentially the installation should take place.
However, we have a return code: 3247440384, equivalent to Microsoft code 0xC1900200

Code: Select all

Exception: Erreur lors de l'installation de ['wapt-windows11-upgrade-cryhod(=10.0.22631-117)']: erreurs dans les paquets [[PackageRequest(package='wapt-windows11-upgrade-cryhod',version=(Version('10.0.22631.0'), 117),architectures=['x64'],locales=['fr'],maturities=['PROD'],tags=['windows-10', 'win-10', 'w-10', 'windows10', 'win10', 'w10', 'windows', 'win', 'w'],min_os_version=Version('10.0.19045'),max_os_version=Version('10.0.19045')), PackageEntry('wapt-windows11-upgrade-cryhod','10.0.22631-117' architecture='x64',maturity='PROD',locale='fr',target_os='windows'), 'Traceback (most recent call last):\n  File "C:\\Windows\\TEMP\\waptwrh1kdyf\\setup.py", line 132, in install\n  File "C:\\Program Files (x86)\\wapt\\common.py", line 3987, in run\n    return ensure_unicode(run(*arg, pidlist=self.pidlist,**args))\n  File "C:\\Program Files (x86)\\wapt\\waptutils.py", line 2212, in run\n    raise CalledProcessErrorOutput(proc.returncode, cmd, \'\'.join(output))\nwaptutils.CalledProcessErrorOutput: Command \'"C:\\\\WindowsUpgrade\\\\setup.exe" /auto upgrade /quiet /eula accept /telemetry disable /showoobe none /copylogs "C:\\\\WindowsUpgradeLogs\\\\win11_upgrade_logs"  /ReflectDrivers "C:\\\\Program Files\\\\Prim\\\'X\\\\Cryhod\\\\drivers" /dynamicupdate disable /noreboot\' returned non-zero exit status 3247440384.\nOutput:\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n  File "C:\\Program Files (x86)\\wapt\\common.py", line 5472, in install\n    result = self.install_wapt(p.localpath,\n  File "C:\\Program Files (x86)\\wapt\\common.py", line 4424, in install_wapt\n    raise e\n  File "C:\\Program Files (x86)\\wapt\\common.py", line 4330, in install_wapt\n    exitstatus = setup.install()\n  File "C:\\Windows\\TEMP\\waptwrh1kdyf\\setup.py", line 137, in install\n  File "C:\\Program Files (x86)\\wapt\\waptutils.py", line 1987, in error\n    raise EWaptSetupException(\'Fatal error : %s\' % reason)\nwaptutils.EWaptSetupException: Fatal error : Command \'"C:\\\\WindowsUpgrade\\\\setup.exe" /auto upgrade /quiet /eula accept /telemetry disable /showoobe none /copylogs "C:\\\\WindowsUpgradeLogs\\\\win11_upgrade_logs"  /ReflectDrivers "C:\\\\Program Files\\\\Prim\\\'X\\\\Cryhod\\\\drivers" /dynamicupdate disable /noreboot\' returned non-zero exit status 3247440384.\nOutput:\n']]

According to Microsoft, this error code seems to mean:
Error code 0xC1900200 (3247440384) usually indicates a compatibility issue or unmet prerequisites for upgrading to Windows 11.

The Wapt prerequisite tests are OK, our positions are recent.
You will find attached the setupact.log and setuperr.log files in an attached zip file.
Do you have any suggestions for resolving this situation?
Thank you in advance for your feedback.
Good day.

[dcardon]

Hi Marc,

there's not much clear information in the logs...

if you download the package to your computer, unzip it, and run the setup.exe command with the same parameters, do you get a popup with a more explicit message or not? It's not uncommon to see additional information displayed graphically.

Regards,

Denis

[dcardon]

Hello again Marc,

It seems to me that the string `additionnal_cmd` wasn't properly escaped because of the backslashes. Could you try with the line like this:

Code: Select all

additionnal_cmd = r""" /ReflectDrivers "C:\Program Files\Prim'X\Cryhod\drivers\" """ 

Sincerely,

Denis

[Vercingetorix]

Hello,
we've made further progress on this.
Adding `additionnal_cmd = " /ReflectDrivers \"C:\Program Files\Prim'X\Cryhod\drivers\""` does indeed bypass Cryhod encryption.

However, I still don't know if the migration is due to the installation of the `windows11-upgrade` package via the WAPT console,
or if it's due to manually launching it by extracting the package on the PC.
I'd say a combination of both, because I had to launch it via the `setup` command on the PC and then manually reboot the PC.
After that, the WAPT package was installed.

We also encountered two issues, one with the message: "Unable to update the reserved part of the system."
We had to clean up this section by deleting the Fonts folder located under

EFI\Microsoft\Boot\Fonts.

The windows11-requirements package doesn't check the available space in this area.
Perhaps this could be added, if possible.

We also had a second PC with the message:
"You cannot install Windows in audit mode."
We had to correct the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\State
IMAGE_STATE_SPECIALIZE_RESEAL_TO_AUDIT

. For both of the above messages, the prerequisites were met.

We are continuing our tests with other PCs and will keep you updated on any developments.
We can now close this thread.
Thank you for your help.
Have a good day.

[Vercingetorix]

Hello,
we have been studying the method of migrating from Windows 10 to Windows 11 using WAPT.

We have concluded that it is not the fastest method in terms of time.

We use the "wapt-windows11-requirements" package, which allows us to see if the PC meets the pre-migration recommendations.

Auditing wapt-windows11-requirements
OK: TPM chip in version 2.0
OK: Enough space disk available
OK: Enough space disk available
OK: SecureBoot is available and not enabled
OK: Currently 4 cores on your CPU
OK: Currently 1.76GHz
OK: Your processor Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz is compatible

This is very useful, but not always sufficient. We encountered installations where we received the message "Unable to update the reserved part of the system."

We didn't use the "wapt-windows11-upgrade" package, even though we figured out how to add drivers for PCs with Cryhod. We ran into three major problems.
Besides the fact that we didn't really succeed,

the package includes version 23h2, while version 24h2 is already available; we would have had to repeat the process to upgrade to the next version.
The 23h2 package is 6 GB, while the 24h2 package is 5.5 GB. The image download occurs when the PC is shut down, and depending on the network, this can take more or less time.
In case of failure, we don't necessarily see the error (see above, "Unable to update the reserved part of the system"). To find it, we had to launch the installation manually, resulting in wasted time loading the package. Manual unzipping and manual restart.

We therefore chose to push the ISO image to the machine to be migrated a few days beforehand and manually run the following command:
`d:\setup.exe /auto upgrade /eula accept /telemetry disable /showoobe none /copylogs "C:\WindowsUpgradeLogs\win11_upgrade_logs" /ReflectDrivers "C:\Program Files\Prim'X\Cryhod\drivers" /dynamicupdate disable`.
For machines without Cryhod, we remove `/ReflectDrivers "C:\Program Files\Prim'X\Cryhod\drivers"`.
Otherwise, error messages: 0x80070003 0x40003.

Thank you for your help.
Have a good day.

[Vercingetorix]

Hello,
we're going with a manual installation using the options.
, if there's a problem, we can see the error in real time.
Also, the 6GB ISO can be downloaded beforehand and won't slow down the PC during the transfer if the network connection is poor.

Thank you for your help.
Have a good day.

[jlepiquet]

Auditing wapt-windows11-requirements
OK: TPM chip in version 2.0
OK: Enough space disk available
OK: Enough space disk available
OK: SecureBoot is available and not enabled
OK: Currently 4 cores on your CPU
OK: Currently 1.76GHz
OK: Your processor Intel(R) Core(TM) i5-8265U CPU @ 1.60GHz is compatible

. This is very useful, but not always sufficient. We encountered installations where we received the message "Unable to update the reserved part of the system."

Good morning,

We have updated the package in order to test this part.
Microsoft's recommendations are not official on this subject, but we have added additional tests, particularly for CPU categories.

Sincerely,

[Vercingetorix]

Hello,
thank you for these additional contributions, we can mark the topic as RESOLVED.