Using a Task Sequence on HP PC’s to change the bios password

_{Wednesday, February 19, 2020 1:17 AM}

Is it possible for a Task Sequence to change the bios password on an HP PC? We receive all of our pc’s from our vendor with a standard generic bios password and would like to change it in the task sequence to ******.assetnumber. The asset number of each device is already set in the bios. Thanks in advance for any help.

- Ken

_{Wednesday, February 19, 2020 3:25 AM ✅Answered}

There's nothing built-in for this no, but using a run command-line task, you can run whatever you want though including tools from a vendor that do whatever the vendor designed them to do. Thus, your request has nothing to do with ConfigMgr or task sequences; you simply need to determine the proper command-line to accomplish your task which is specific to the tool from the vendor and not ConfigMgr.

Jason | https://home.configmgrftw.com | @jasonsandys

_{Wednesday, February 19, 2020 6:41 AM ✅Answered}

 Hi Ken,

Reasech and find the following links for the refence:

To get the serial number we can use command “wmic bios get serialnumber”, 

For HP computers, it seems we can use BiosConfigUtility.exe (BCU) to change the BIOS password.  We can download the BCU tool and then run command biosconfigutility /nspwd to reset the Bios password.

https://support.hp.com/sg-en/document/c03161127

Note: non-Microsoft article, just for the reference.

I think we can combine these commands into a script and add it into task sequence.

Hope it can help.

Best regards.
Crystal

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

_{Thursday, February 20, 2020 12:24 PM ✅Answered | 1 vote}

The process should look something like this:

1. Download BIOSConfigUtility.exe and HpqPswd.exe HP Tools.

2. Use the HP Password Encryption Utility (HPQPswd.exe) to create the password file for the current BIOS password (e.g. BIOSPWCurrent.bin)

3. Read the Asset number (e.g. via WMI) and save it to a variable (e.g. $strAssetNumber)

4. Use the HP Password Encryption Utility (HPQPswd.exe) to create the password file for the new BIOS password (e.g. BIOSPWNew.bin)

HpqPswd.exe /s /p"12345678" /f"BIOSPWNew.bin"

6. Use the following command to set the new BIOS password:

BIOSConfigUtility.exe /nspwdfile:"BIOSPWNew.bin" /cspwdfile:"BIOSPWCurrent.bin"

This can be also done as a software package.

More info here: https://ftp.hp.com/pub/caps-softpaq/cmit/whitepapers/BIOS_Configuration_Utility_User_Guide.pdf

_{Thursday, February 20, 2020 11:51 PM}

Awesome, thanks so much!!! I run the configuration center (where we image all of the pc's) and after testing this process in the home lab I'll be able to bring it to the engineers. This will save me so much time (I have 4 racks with 64 pc's on each). Changing the password on each of them is very time consuming.

_{Thursday, February 20, 2020 11:51 PM}

That definitely helps. Thanks Crystal!

_{Friday, February 21, 2020 4:40 AM}

Hi Ken,

Thanks for marking our replies as answer. I am glad that our information can help. If there's anything else we can help in the future, feel free to let us know.

Thanks for posting in our forum and have a nice day!

Best regards.

Crystal

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.