[KB7122] Install Windows Feature Updates on a Full Disk Encrypted (FDE) system

Issue

ESET Endpoint Encryption Client and ESET Endpoint Encryption Server are separate products from ESET Full Disk Encryption

The article below applies only to the ESET Endpoint Encryption Client or ESET Endpoint Encryption Server and not ESET Full Disk Encryption.

Visit ESET Full Disk Encryption support to view ESET Full Disk Encryption content.

  • When installing a Windows Feature Update, the process fails with the following message:

    0xC1900101 - 0x20017

    The installation failed in the SAFE_OS phase with an error during BOOT operation

Details

This error message is shown when Windows fails to install a Feature update on a Full Disk Encrypted (FDE) Workstation. Windows will fail to install a Feature Update if you do not specify the location of the encryption drivers as part of the installation process.

Solution

Changing boot mode not supported

Changing the boot mode of your system from Legacy BIOS to UEFI is not supported by ESET Endpoint Encryption.

ESET Endpoint Encryption (EEE) has a preset SetupConfig.ini file which specifies the necessary parameters to allow Windows to install Feature Updates seamlessly through the built-in Windows Update mechanism.

  1. Ensure you are running the latest version of EEE.

  2. Press the Windows key + Q, type Check for updates into the Search field and click Check for updates.

  3. Click Check for updates in the Windows Update window.

Last Updated: Nov 7, 2025

Additional resources

User guides

ESET Forum

YouTube videos
ESET Support News ESET Customer Advisories ESET Status Portal ESET Technical Support

Existing customer?