Deploying Dell BIOS Updates with and without Bitlocker through ConfigMgr (SCCM)

The following steps are how to setup and configure Dell BIOS Updates.

Prepare Dell CCTK

1.       Create a folder on the ConfigMgr server for the Dell CCTK
http://support.dell.com/support/downloads/download.aspx?c=us&l=en&s=gen&releaseid=R286063&SystemID=LAT_E6500&servicetag=&os=WW1&osl=en&deviceid=19098&devlib=0&typecnt=0&vercnt=4&catid=-1&impid=-1&formatcnt=0&libid=36&typeid=-1&dateid=-1&formatid=-1&source=-1&fileid=424564

2.       Extract to the newly created folder

3.       In ConfigMgr (SCCM) Create a Package for Dell CCTK

Prepare BIOS Updates and Script

1.       Create a folder on the ConfigMgr server for a script and the BIOS updates

2.       Download and save the BIOS updates to the folder created in step 1.

3.       Copy and paste the following script in the folder created in step 1.

4.       Edit the script to match the Model and BIOS update being executed.

On Error Resume Next

Set WshShell = CreateObject("Wscript.Shell")

Set WshNet = CreateObject("Wscript.Network")

CompName = WshNet.ComputerName

Set objLocator = CreateObject("WbemScripting.SWbemLocator")

Set wmi = objLocator.ConnectServer(CompName, "root\cimv2",,,,,128)

‘ **********   Get Computer Model **************

For Each Instance in wmi.ExecQuery("Select * From Win32_ComputerSystem",,48)

Model = Instance.Model

Next

‘ **********   Get BIOS Revision ***************

For Each Instance in wmi.ExecQuery("Select * From Win32_Bios",,48)

BIOSRev = Instance.SMBIOSBIOSVersion

Next

Model = Trim(Model)

Set env = CreateObject("Microsoft.SMS.TSEnvironment")

env("FlashBIOS") = "False"

 

‘****************************** DESKTOPS ************************************

‘*** OptiPlex 780 ***

If Model = "OptiPlex 780" and BIOSRev < "A06" Then

env("FlashBIOS") = "True"

WshShell.Run "O780-A06.EXE -nopause -noreboot"

Wscript.Sleep 10000

End If

‘****************************** LAPTOPS ************************************

‘*** Latitude E6410 ***

If Model = "Latitude E6410" and BIOSRev < "A06" Then

env("FlashBIOS") = "True"

WshShell.Run "E6410A06.EXE /S /F /R"

Wscript.Sleep 10000

End If

‘**************************** END OF SCRIPT ********************************

Wscript.Quit(0)

5.       In ConfigMgr (SCCM) Create a Package for Dell BIOS Update Deployment

Create BIOS Update Task Sequence

1.       Create a standard Task Sequence and edit the Task Sequence to look like the following

clip_image002[4]

2.       Create a new Group called Upgrade BIOS for Bitlocker System (Add à New Group)

a.       Click on the new group

b.      On the right side, click Options

c.       Add Condition for a WMI Query

d.      Query – SELECT Protection_Status FROM SCCM_BitLocker WHERE Protection_Status LIKE "%PROTECTION ON%"

clip_image004[4]

3.       Add a new Command Line task called Remove BIOS Password (Add à General à Command Line)

a.        On the Command Line add the syntax cctk –setuppwd=  –valsetuppwd=<Your BIOS Password>

b.      Check Package and Add the Dell CCTK package you created earlier

clip_image006[4]

4.       Add a new task Disable Bitlocker (Add à Disks à Disable Bitlocker)

5.       Add a new Command Line task called Verify and Upgrade BIOS (Add à General à Command Line)

a.        On the Command Line add the syntax cscript UpdateBIOS.vbs

b.      Check Package and Add the BIOS Updates package you created earlier

6.       Create a new Group called Complete Update (Add à New Group)

7.       Add a new task Enable Bitlocker (Add à Disks à Enable Bitlocker)

8.       Add a new Command Line task called Set BIOS Password (Add à General à Command Line)

a.        On the Command Line add the syntax cctk –setuppwd= <Your BIOS Password>

b.      Check Package and Add the Dell CCTK package you created earlier

9.       Create a new Group called Upgrade BIOS for NON Bitlocker Systems (Add à New Group)

10.   Add a new Command Line task called Verify and Upgrade BIOS (Add à General à Command Line)

a.        On the Command Line add the syntax cscript UpdateBIOS.vbs

b.      Check Package and Add the BIOS Updates package you created earlier

You’re done. Now advertise your task sequence to a collection to test each of the BIOS updates you downloaded.

2 Comments

  1. Jamo39 January 12, 2011
  2. Michael November 25, 2015

Leave a Reply

x

We use cookies to ensure the best possible experience on our website. Detailed information on the use of cookies on this site is provided in our Privacy and Cookie Policy. Further instruction on how to disable our cookies can be found there.