I ended up decrypting, unistalling, updating OS to Win10, then reinstalling the encryption software and reincrypting.
According to the Symantec tech support, there is a script that allows the upgrade without going through the entire process, but it is time consuming. The tech advised me that since we have stand-alone machines, it is not worth the effort, just do what I did in the opening paragraph.