TPM reset across multiple HP laptop models

[Vick_Vega]

Hello,

I have several thousand of laptops that in the past were encrypted with 3rd party disk encryption solution. Because of that, TPM chip is "occupied" or "captured" by the software and I can not use native BitLocker capability to encrypt the disk.

Due to dispersity and vast number of laptops across the globe, it's impractical to physically reach every laptop and "clear TPM" in the BIOS. As it seems to be the only way to get BIOS released and set to factory settings. The disks on several test laptops have been decrypted and awaiting deployment of BitLocker which I can't enable due to the above.

I have found the following PowerShell tools provided:
https://ftp.hp.com/pub/caps-softpaq/cmit/hp-cmsl.html

or BIOS-CLI:
https://developers.hp.com/hp-client-management/doc/bios-cli

That allows me to do that, however I bump into a problem:
PS C:\Temp> Set-HPBiosSetupPassword -newpassword MyNewPassword777 -target Laptop1
PS C:\Temp> Set-HPBiosSettingValue -name "TPM Reset to Factory Defaults" -value Yes -password MyNewPassword777 -target Laptop1

I'm getting the following error:

Access denied
At C:\Program Files\WindowsPowerShell\Modules\HP.ClientManagement\HP.ClientManagement.psm1:597 char:7
+ throw $Err
+ ~~~~~~~~~~
+ CategoryInfo : OperationStopped: (Access denied:String) [], RuntimeException
+ FullyQualifiedErrorId : Access denied

Could someone assist please?

Thank you.

[Echo_Lake]

@Vick_Vega
Thank you for posting on the HP Support Community.

Don't worry as I'll be glad to help, however, to provide an accurate resolution, I need a few more details:

• What is the product number of your device? Use this link to find it: http://support.hp.com/us-en/document/c03754824 (Ensure you do not share any of your personal information such as serial, phone number, email ID, etc...).

Keep me posted for further assistance.