Unsolved
1 Rookie
•
2 Posts
0
3468
November 24th, 2022 08:00
How to deploy a Dell Command Update policy.xml file
Hi,
You can import and export the settings for Dell Command Update manually but how would you deploy the policy.xml file and its settings to 1000's of devices? I know you can do it via registry settings via Group Policy Preferences or via SCCM Configuration Items but I specifically want to configure the BIOS firmware updates settings which requires a BIOS password - this can't really be set by either of the above methods as the password will be visible and not encrypted.
Thanks
No Events found!
John harper
2 Intern
•
346 Posts
0
February 16th, 2023 00:00
On the title bar, click Settings. On the Settings screen, click Update Settings. Under Automatically check for updates > Check for updates, select one of the following: Weekly Updates—If you select this option, Dell Command | Update runs the updates on the system once in a week.
AjpUK
1 Rookie
•
2 Posts
0
February 17th, 2023 10:00
Hi, thanks for the reply but this doesn't actually answer my question at all.
badingb
1 Rookie
•
2 Posts
0
May 9th, 2023 06:00
The problem with 3rd party risk management is right here, nobody reads. I read "how would you deploy the policy.xml file and its settings to 1000's of devices" and got it right away. The answer to "On the title bar, click Settings. On the Settings screen, click Update Settings" would require going to each of the 1000's devices and is clearly not an answer. Until Dell creates a Group Policy that can be centrally managed like Lenovo, HP and other vendors do, there is a 3rd party risk being ignored and not in line with the CISA's Security By Default that tells us that 3rd parties are our big risk.
monikatak
1 Rookie
•
30 Posts
0
May 11th, 2023 06:00
To deploy the policy.xml file and its settings to a large number of devices while keeping the BIOS password secure, you may need to use a specialized deployment tool or script that can encrypt the password and push the settings to the devices remotely.
Paxinator
1 Rookie
•
2 Posts
1
November 21st, 2023 13:11
This method worked for me:
1- Remote install Command Update
2 - Copy the exported Settings.xml file to the target PC C:\Temp directory
3 - Run remotely this cmd command:
"C:\Program Files\Dell\CommandUpdate\"dcu-cli.exe /configure -importSettings=C:\Temp\Settings.xml
If you need to set BIOS password this is it:
"C:\Program Files\Dell\CommandUpdate\"dcu-cli.exe /configure -biosPassword="Test1234"
(edited)
ajpukpp
1 Rookie
•
2 Posts
0
December 22nd, 2025 16:22
Is this the answer?
BIOS Password Is Not Included in the Exported Configuration of Dell Command Update | Dell US
Resolution
If the customer wants to deploy updates using the BIOS password feature, they must use the CLI by following the step described below:
Create an encrypted BIOS password setting:
dcu-cli /generateencryptedpassword -encryptionkey=""MyEncryptionKey01"" -password=""The Local System BIOS Password"" -outputpath=""C:\temp""An encrypted password is saved to the file 'C:\temp\encryptedPassword.txt'.
Program exited with return code: 0
Open the encryptedPassword.txt file and copy the encrypted password.
In this example, the encrypted password is:
""AdMNCABdAq6eZ2CX4My2aUFINCYBzTv99yYH8eb4Yjow+4jjppfZzt8pICNXj+MMLzQjCVJFvGfKEd7toFXy57fDwVZq6G+dpdUg8++yZQWmPKWTKBbu/tAxi9Ni""Run the following command on the target computers, substituting the user’s encrypted password and encryption key for mine.
dcu-cli /applyupdates -encryptionkey=""MyEncryptionKey01"" -encryptedpassword=""AdMNCABdAq6eZ2CX4My2aUFINCYBzTv99yYH8eb4Yjow+4jjppfZzt8pICNXj+MMLzQjCVJFvGfKEd7toFXy57fDwVZq6G+dpdUg8++yZQWmPKWTKBbu/tAxi9Ni""