SCCM OSD Automation and Troubleshooting

Automating Dell BIOS Password Management with PowerShell and CCTK

Automating Dell BIOS Password Management with PowerShell and CCTK

Managing BIOS passwords across enterprise devices is a critical security requirement. Ensuring that BIOS credentials are updated consistently helps protect systems from unauthorized configuration changes and strengthens overall endpoint security.

This PowerShell script provides a structured and automated approach to updating Dell BIOS setup passwords using Dell Command Configure Toolkit (CCTK), while maintaining robust logging and state tracking.

Overview of the Script

The script is designed to:

Retrieve old and new BIOS passwords from SCCM Task Sequence variables
Execute the CCTK command to update the BIOS password
Capture output and exit codes
Log all activity to a centralized file
Persist execution results in the Windows Registry
Prevent repeated execution once successful

Task Sequence Integration

Smart BIOS Upgrade

Automating Dell BIOS Upgrades with PowerShell in an Enterprise Environment

Managing BIOS updates across enterprise devices is often a complex and high-risk task. Firmware updates require careful coordination, user awareness, and strict safeguards such as power checks and version validation. This PowerShell solution addresses those challenges by delivering a fully automated, user-aware BIOS upgrade workflow integrated with Microsoft Configuration Manager (SCCM) task sequences.

This script combines automation, user interaction, validation logic, and a graphical interface to create a reliable and controlled BIOS upgrade process.

Overview of the Solution

The script is designed to handle the entire BIOS upgrade lifecycle, from initial detection to final verification. It performs the following key functions:

Detects system model and current BIOS version
Compares it against a predefined expected version (via JSON file)
Determines whether an upgrade is required
Prompts the user with retry options
Enforces AC power requirements for laptops
Executes the BIOS update silently
Displays a real-time progress UI
Logs all actions for auditing
Verifies success after reboot

This approach ensures both operational efficiency and user safety.

Dynamic BIOS File Handling

The script automatically identifies the BIOS executable located in the same directory. This avoids hardcoding file names and allows the same script package to support multiple models.

By dynamically picking the executable, administrators can easily maintain the solution by simply updating the BIOS files in the folder.

Logging and Traceability

A structured logging mechanism writes all activity to:

C:\ProgramData\GlobalClient\LogFiles

Each device generates a uniquely named log file based on its model. This makes troubleshooting straightforward and ensures full traceability for every upgrade attempt.

User-Friendly Progress Interface

A key highlight of this solution is its custom WPF-based graphical interface. Instead of leaving users unsure about what’s happening, the script displays:

A progress bar with percentage completion
Status messages indicating current steps
A scrolling output log
Corporate branding through logo integration

The UI also includes basic window controls like minimize functionality and drag movement, offering a polished and professional experience.

Integration with SCCM Task Sequences

TS Export

function Export-TSToExcel

{

param (

[Parameter(ParameterSetName="FromXml", Mandatory)]

[ValidateNotNullOrEmpty()]

[xml] $Xml,

[Parameter(ParameterSetName="FromXmlPath", Mandatory)]

[ValidateNotNullOrEmpty()]

[System.IO.FileInfo] $XmlPath,

[Parameter(ParameterSetName="FromTaskSequence", Mandatory, ValueFromPipeline)]

[ValidateNotNullOrEmpty()]

[object] $TaskSequence,

[Parameter(ParameterSetName="FromTaskSequence")]

[Parameter(ParameterSetName="FromXml")]