squmph Posted March 4, 2014 Report post Posted March 4, 2014 Hi all, We have our entire estate encrypyted with Bitlocker (TPM). I am trying to work out the best way to deploy a BIOS update using HP's HPQFlash utility. This is not a problem without Bitlocker - it's just a matter of deploying HPQflash with the right bits and parameters. However, on an encrypted machine, Bitlocker has to be suspended during the update because various values in BIOS are changed as part of the process, which can (and does) cause the TPM to decide it doesn't trust the system. So I need the process to work like this: 1) Suspend Bitlocker (manage-bde -protectors -disable c:) 2) Run the update (HPQFlash -s etc etc etc) 3) Complete a reboot to apply the update, which SCCM recognises by the return code of the above. This must not happen while the machine is in use - it would be best if it just waits for the user or another process to perform the reboot (as it does currently) and we will cope with bitlocker being off for a while. 4) Resume Bitlocker (manage-bde -protectors -enable c:) Can anyone suggest the best way of doing this please? Step 3 is the difficult bit I feel. Thanks Rob Quote Share this post Link to post Share on other sites More sharing options...
