Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell Command | PowerShell Provider BIOS Passwords feature

Summary: Learn how to use PowerShell Provider BIOS password features.

This article may have been automatically translated. If you have any feedback regarding its quality, please let us know using the form at the bottom of this page.

Article Content


Symptoms

Affected Products:

Dell Command | PowerShell Provider


Cause

Not Applicable

Resolution

The Unified Extensible Firmware Interface (UEFI) BIOS supports several kinds of BIOS passwords that provide different levels of security to Dell computers. Admin (Setup) password and System (User) password are commonly used, and both have unique security purposes.

Admin Password

The admin password provides security by locking all the BIOS features and settings. The user can boot and see the BIOS settings, but they cannot modify them unless the correct admin password is provided to the computer.

Note: After setting the admin password, no BIOS settings can be modified except the System password, the hard drive password, and the Wireless Switch.

System password

The system password provides security by preventing the user from booting the computer. The user cannot see the boot menu (F2/F12) unless the correct system password is provided. Once the password is provided to the computer, the BIOS setup options can be modified. In the case where the admin password is also set on the machine, the admin password must also be provided to modify the BIOS settings.

Configuring BIOS passwords using Dell Command | PowerShell Provider (DCPP)

Dell Command | PowerShell Provider can be used to configure the admin and system passwords. The User can set, modify, and clear these passwords. The User can also verify whether the password is set or not. To learn more about installing and configuring Dell Command | PowerShell Provider module on your computer, reference Download and Installation section in user guide. To download the user guide, click Dell Command | Powershell Provider Documentation.

Verifying Admin/System password

The user can verify whether the Dell machine has the admin or system password set or not, using Dell Command | PowerShell Provider. To verify, run the following commands:

  • Get-Item -Path DellSmbios:\Security\IsAdminPasswordSet
  • Get-Item -Path DellSmbios:\Security\IsSystemPasswordSet

Output of these two commands is true or false based on whether each password is set on machine or not.

SLN312150_en_US__1i_img1_11733_DS_v1
Figure 1: IsAdminPasswordSet

Setting Admin/System password

The admin and system password both require a minimum of 4 and a maximum of 32 characters. To set the passwords, use the following commands.

  • Set-Item -Path DellSmbios:\Security\AdminPassword "$AdminPwd"
  • Set-Item -Path DellSmbios:\Security\SystemPassword "$SystemPwd"

SLN312150_en_US__2i_img2_11733_DS_v1
Figure 2: AdminPassword

Note: If the computer has an admin password set and the user wants to set system password, provide the admin password using the following command:
Set-Item -Path DellSmbios:\Security\SystemPassword "$SystemPwd" -Password "$AdminPwd"

Modifying Admin/System password

To modify the admin or system passwords using DCPP, run the following commands:

  • Set-Item -Path DellSmbios:\Security\AdminPassword "$NewAdminPwd" -Password "$OldAdminPwd"
  • Set-Item -Path DellSmbios:\Security\SystemPassword "$NewSystemPwd" -Password "$OldSystemPwd"

SLN312150_en_US__4i_img3_11733_DS_v1
Figure 3: PS AdminPassword (changing password)

Clearing Admin/System password

To modify the password using DCPP, run the following commands:

  • Set-Item -Path DellSmbios:\Security\AdminPassword "" -Password "$OldAdminPwd"
  • Set-Item -Path DellSmbios:\Security\SystemPassword "" -Password "$OldSystemPwd"

SLN312150_en_US__5i_img4_11733_DS_v1
Figure 4: Security AdminPassword (clearing password)

Note:
  • The admin password cannot be set if a system or hard drive password is already set on the computer.
  • If the computer is in legacy boot mode, the admin password is required for all UEFI boot paths but if the computer is in UEFI boot mode, then the admin password is not required for the UEFI boot paths.
  • Clearing the admin password also clears the system password.

Dependency on other BIOS features

Strong Password

Strong password applies rules on to the admin and system passwords. When the strong password feature is enabled, the admin password and system password require,

  • Minimum of eight characters
  • Must contain at least one uppercase, and one lowercase character.

To enable or disable this setting using DCPP, run the following commands:

  • Set-Item -Path DellSmbios:\Security\StrongPassword "Enabled"
  • Set-Item -Path DellSmbios:\Security\StrongPassword "Disabled"

SLN312150_en_US__7i_img5_11733_DS_v1
Figure 5: StrongPassword

Password Bypass

This BIOS setting provides the facility to bypass the system password during computer restart or resume from standby. If the Password Bypass feature is disabled and the system password is set, then the computer prompts for the system password during every restart, or computer resumes from standby state.

  • Disabled - If the Password Bypass feature is disabled and the system password is set, then computer prompts for system password during every restart, or computer resumes from standby state.
  • Reboot Bypass - The computer does not prompt for the system password during computer restart.
  • Resume Bypass - The computer does not prompt for the system password during computer resumes from standby state.
  • Reboot and Resume Bypass - The computer does not prompt for the system password during computer restart, or computer resumes from standby state.

To modify these settings using DCPP, run the following commands:

  • Set-Item -Path DellSmbios:\Security\PasswordBypass "Disabled"
  • Set-Item -Path DellSmbios:\Security\PasswordBypass "Reboot Bypass"
  • Set-Item -Path DellSmbios:\Security\PasswordBypass "Resume Bypass"
  • Set-Item -Path DellSmbios:\Security\PasswordBypass "Reboot and Resume Bypass"

SLN312150_en_US__8i_img6_11733_DS_v1
Figure 6: PasswordBypass

Admin Setup Lockout

If the admin password is set on your machine, the user can view the BIOS setup menu (F2/F12) in the locked mode. The admin password is required only if the user wants to modify the BIOS settings. The Admin Setup Lockout feature provides more security to the computer. If the Admin Setup Lockout is enabled and the admin password is set, then the user cannot view the BIOS setup menu (F2/F12) until the user provides the correct admin password.

To enable or disable this setting using DCPP, run the following commands:

  • Set-Item -Path DellSmbios:\Security\AdminSetupLockout "Enabled">
  • Set-Item -Path DellSmbios:\Security\ AdminSetupLockout "Disabled">

SLN312150_en_US__9i_img7_11733_DS_v1
Figure 7: AdminSetupLockout

Article Properties


Affected Product

Dell Command | Powershell Provider

Last Published Date

14 Jun 2022

Version

7

Article Type

Solution