HP Spectre x360 BIOS upgrade using SCCM

[CEDICT]

Hello!

I'm currently tasked with a mass BIOS upgrade to 500+ HP Spectres x360 Convertable and I was hoping to do this using SCCM 2012 as I previously have done for other desktops and notebooks

Previously I would have created a cmd file using either hpqFlash.exe or HPBIOSUPDREC.exe, however, I can't get either to work:

hpqFlash.exe - The BIOS is downloaded from HP in an exe format which I can get extracted to .bin & .sig files, but this tool requires a .cab file

HPBIOSUPDREC.exe - After extracting the BIOS to .bin files, this tool complains that they're not in the correct BIOS 2013 naming convention and I get about 4 of each?

So.. Has anybody previously managed this? Do I need to rename the .bin files to the correct naming convention, if so, how would I find this out?

*EDIT - We also use bitlocker so this may need to be disabled before a BIOS upgrade? All I really need is the command line and can go from there!

Thanks in advance!

[happytohelp01]

Hi @CEDICT,

I have brought your issue to the attention of an appropriate team within HP. They will likely request information from you in order to look up your case details or product serial number. Please look for a private message from an identified HP contact. Additionally, keep in mind not to publicly post serial numbers and case details.

If you are unfamiliar with how the Forum's private message capability works, this post has instructions.

[kaisersose]

Hi CEDICT,

Did you ever get this working? have the same issue with the x360 G1 and now G2

Regards

[CEDICT · Accepted solution]

According to HP Support it couldn't be done... BUT.. Turns out you can put a /Q on the extracted exe and it will install silently... Not that it mentions that in the BIOS notes....

Ended up modifying this script below and copied it to a location the SYSTEM account is able to access: https://gallery.technet.microsoft.com/scriptcenter/Suspend-Bitlocker-and-0e3d43c0

schtasksCreateCommand = "schtasks /Create  /TN ""bitlockerscript"" /XML ""\\domain.local\NETLOGON\HPBIOS\bitlockerscript.xml"""

(I used an .xml file to give me more options about running the task even on battery, as we want this task to force bitlocker back on the drive at next logon whether it worked or not).

Then, creating a new application in SCCM with source files (Containing a copy of the script) pointing to a batch file which contains:

cscript.exe bitlockerstatus.vbs
timeout /t 10
0804FF35.exe /Q
timeout /t 600

(Timeouts were just for me to make sure the BIOS installs before SCCM requests a reboot).

To force the reboot I changed the return codes:

0  Soft reboot

1707 Soft reboot

3010 Soft reboot

Finally.. I created a detection rule using this script below to detect the version of BIOS installed:

'Change strBIOSUpdateVersion to the version you are deploying to
strBIOSUpdateVersion = "F.35"
'Get BIOS Version from Win32_BIOS
Set objWMI = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
Set colBIOS = objWMI.ExecQuery("Select * from Win32_BIOS")
For Each objBIOS In colBIOS
If objBIOS.SMBIOSBIOSVersion >= strBIOSUpdateVersion Then
WScript.Echo "Detected"
End If
Next

Hope this all helps

[kaisersose]

Hi,

Thats really helpful thanks. yet to test within a task sequence, but works great as a delivered app.

I just do one thing differently. you can use this powershell comand within your .bat file:

POWERSHELL Suspend-BitLocker -MountPoint "C:" -RebootCount 1

to supress bitlocker for 1 reboot. Doing it via a script is clever, but if the scheduler fails to initialise after the reboot the system will not resume bitlocker indefinatley (or until GPO runs).

Thanks again