Enable TPM and BitLocker on HP Elitebook 840G3 via MDT task sequence.

[Veersen]

Hi Team,

I want to Enable TPM and BitLocker on HP Elitebook 840G3  via MDT task sequence.

I am not able to find the BUC for this perticular model.

Please help...

[Star_Fox]

Do you mean BIOS Configuration Utility?

HP BIOS Configuration Utility (BCU)

http://ftp.hp.com/pub/caps-softpaq/cmit/HP_BCU.html

[SuperTommy]

You can use the HP BCU referenced above. Assuming this is a new computer without a BIOS password...

1) Create a text file with the following and save it as biosconfig.txt.

BIOSConfig 1.0
;
;     Originally created by BIOS Configuration Utility
;     Version: 4.0.13.1
;     Date="2016/03/04" Time="16:32:30" UTC="-6"
;
;     Found 149 settings
;
TPM Specification Version
	1.2
TPM Device
	Hidden
	*Available
TPM State
	Disable
	*Enable
Clear TPM
	*No
	On next boot
TPM Activation Policy
	F1 to Boot
	Allow user to reject
	*No prompts

2) Create a BAT file called hpTPMEnable.bat with the command below and place it in the Script Root of your deployment share (where all of the other MDT scripts exist). Make sure you update the locations of all the files so they reflect where you placed BIOSConfigUtility64.exe, biosconfig.txt and pwd.bin files. The account used by MDT needs to have read access to the directories you placed these files in. I recommend you put them inside of the deployment share. You will need to generate a password file (.BIN) using HPQPswd64.exe if you do not have one.

\\DEPLOYSERVER01\Workstations$\Custom\bios\hp\BIOSConfigUtility64.exe /set:"\\DEPLOYSERVER01\Workstations$\Custom\bios\hp\biosconfig.txt" /nspwdfile:"\\DEPLOYSERVER01\Workstations$\Custom\bios\hp\pwd.bin"

3) Add a Run Command Line Task to Your Task Sequence. I recommend doing it outside of WinPE (after the OS is installed).

For an example, see here: http://i.imgur.com/SXNtz4a.png

cmd.exe /c "%SCRIPTROOT%\hpTPMEnable.bat"

[soccer_dan]

there is also a white paper, linked from www.hp.com/go/clientmanagement, that reviews all that is needed to create, deploy, and maintain, a Windows image on an HP product. Althought designed for SCCM, you should be able to pull the information and use MDT instead (MDT is integrated into SCCM as OSD for image deployment)

THe white papers are listed in the 'HP CMS Whitepapers' page. Lots of good info there

[AnisIT1983]

Could You please explain the second point? It's not clear, from where we can get BIOSConfigUtility64.exe Or/and HPQPswd64.exe.

Regarding \\DEPLOYSERVER01\Workstations$, is it a generic path , what does it mean ?should we replace by our local path or what ?

Can you eplain further this step ?

[Hoko]

http://ftp.hp.com/pub/caps-softpaq/cmit/HP_BCU.html