Hi,

we are are using SCCM to deploy software and updates and via SCUP/SCCM also Dell drivers and BIOS updates. Now we want to protect all clients (PC and mobile devices) with a BIOS password. So far so easy but how to keep deploying BIOS updates with a setted BIOS password? If i update it manually update process will ask for the password and even recognize within windows if its a wrong one.

This leads me to some questions:

is it possible to provide the BIOS updates the same way but with the password already included somehow in the EXE? I dont want to provide the password in a clear form like in a batch or something...

Also want to restrict BIOS updates only to signed updates, is it possible to combine this two features like building a new EXE with included password and sign it with our own PKI mechanism and then deploy it to the clients so they can update on their own via SCCM? Has anybody done that before or is there any alternative way?

Thanks Sascha