ftp.hp.com

1 HP BIOS Configuration Utility (BCU)User Guide Copyright 2012 2015, 2019 Hewlett-Packard Development Company, and Core are trademarks of Intel Corporation in the and other countries. Microsoft , Windows , and Windows Vista are trademarks of the Microsoft group of computer software. Valid license from HP required for possession, use or copying. Consistent with FAR and , Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the Government under vendor's standard commercial information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.

2 HP shall not be liable for technical or editorial errors or omissions contained Edition: November 2019 First Edition: May 2012 Document Part Number: 700600-006 User input syntax keyText that you must enter into a user interface is indicated by fixed-width -1 Syntax and their descriptionsItemDescriptionText without brackets or bracesItems you must type exactly as shown<Text inside angle brackets>A placeholder for a value you must provide; omit the brackets[Text inside square brackets]Optional items; omit the brackets{Text inside braces}A set of items from which you must choose only one; omit the braces|A separator for items from which you must choose only one; omit the vertical that can or must repeat; omit the ellipsisiiiiv User input syntax keyTable of contents1 Getting started.

3 1 What is HP BIOS Configuration Utility? .. 1 System requirements .. 1 Installation .. 12 Command-line parameters .. 23 BIOS configuration .. 4 WMI support required .. 4 Replicated setup .. 4 Important notes .. 5 Password management .. 6 BCU with HP Sure Admin .. 6 Comments .. 8 Appendix A Error codes .. 9 Appendix B Sample configuration file .. 12 Appendix C HP Password Encryption Utility .. 18vvi1 Getting startedWhat is HP BIOS Configuration Utility?HP BIOS Configuration Utility (BCU) is a free utility that enables you to do the following: Read available BIOS settings and their values from a supported desktop, workstation, or notebook computer Set or reset Setup Password on a supported desktop, workstation, or notebook computer Replicate BIOS settings across multiple client computersDownload the latest version of BCU from requirementsTable 1-1 Minimum hardware and software for clientsWindows 7, Windows 8, Windows , Windows PE (version or later), Windows :BIOS setting management is supported under Windows PE , , or See WMI support required on page.

4 Support of Windows XP and Windows Vista has been deprecated in BCU version the BCU SoftPaq to install its contents to the folder <PROGAMFILESDIR>\HP\BIOS Configuration Utility\, where <PROGAMFILESDIR> is the Program Files folder on the target system (For example, C:\PROGRAM FILES). The resulting files at the target folder include: Internet shortcut to BIOS Configuration Utility User is HP BIOS Configuration Utility?12 Command-line parametersUse the following syntax to run <options> or <options>The valid options are:ParameterDescription/Get:"filename" or /GetConfig:"filename"Gets the configuration :If "filename" is empty, BCU writes configuration data to the output :"filename" or /SetConfig:"filename"Modifies the system BIOS configuration. Accepts only REPSET formatted : filename or /CurSetupPasswordFile: filename or /cpwdfile: filename Specifies the current BIOS Setup Password by providing an encrypted password file.

5 Current password should be provided when changing BIOS settings or password. Can specify only one current password file. Use to generate password file. See Password management on page 6 for additional details on this :Requires BCU version or using a BCU version earlier than , use /cspwdfile: filename ./nspwdfile: filename or /NewSetupPasswordFile: filename or /npwdfile: filename Specifies the new BIOS Setup Password by providing an encrypted password file. To remove the password, use /npwdfile: . Use to generate the password file. See Password management on page 6 for additional details on this :Clearing the BIOS Setup Password will remove all BIOS BCU version or using a BCU version earlier than , use /nspwdfile: filename ./? or /HelpDisplays a help BIOS settings to their default :/SetDefaults does not change every possible value; also, it does not change settings on an individual used with /Set, displays details about each setting, such as success, the reason for failure (warning), or failure code (error).

6 /WarningAsErrWhen used with /Set, displays details about each setting. Unlike /verbose, any settings not applied due to warnings cause BCU to return program error code 13 instead of 2 Command-line parametersParameterDescriptionNOTE:Requi res BCU or later. When both /verbose and /WarningAsErr are used, /WarningAsErr will take platform support for Unicode passwords only. If not supported, returns error code 32. Use only in batch files; this command is not compatible with other :Requires BCU version or the log folder and log file default to the executable :Requires BCU version or the value of a given setting without using the config : /getvalue: Asset Tracking Number NOTE:Requires BCU version or the value of a given setting without using the config : /setvalue: Asset Tracking Number , 12345678 NOTE:Requires BCU version or.

7 ValueWhen this value is set to 0, a setting will be rejected if the anti-replay value specified is less than what is stored by the this value is set to 1 a setting will be rejected if the anti-reply value specified is less than or equal to what is stored by the BCU uses the same anti-replay value for all the settings made within a file, when it is used with a settings file containing multiple changes, this value must be set to 0 or only 1 setting will get :valueProvides AntiReplay value. The firmware compares the anti-replay value used for each setting with an internal value (initially 0). If the value provided with the setting is less than (or equal based on the /ot setting) to what is stored then the setting is rejected. If the setting is accepted. the firmware updates its internal value with the value used by the setting.

8 This logic is used to prevent older settings from being reused for security reasons. A common method of simplifying the management of this value is to use the epoch / unix time in UTC as the value. The current values stored by the BIOS are available in the BIOS settings:/uid:value Provides the MachineID Universally Unique Identifier (UUID) this is available in the BIOS setting Universally Unique Identifier (UUID) and can be used to target the setting to a single a value of FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF allows the settings to be applied on any machine. The default value is : *.pfx Specifies the path /filename to the PFX file that contains the private key to use when signing the :Includes the unique signature strings required to change BIOS settings on a system with HP Sure Admin configurationBCU is a Windows-based tool that lets you create standard configuration settings and deploy them across the enterprise.

9 By creating a configuration text file with only the setting you want to change, you can deploy it to all systems in the enterprise. If a particular system does not support the specified setting, it will be support requiredBCU requires HP custom WMI namespace and WMI classes (at the namespace root\HP\InstrumentedBIOS) provided by BIOS. BCU will only support models with a WMI-compliant BIOS, which are most commercial HP desktops, notebooks, and running BCU, it is helpful to make sure that the HP BIOS WMI classes are in the namespace root\HP\InstrumentedBIOS. When using BCU in WinPE, ensure that the WMI component is added to the boot image using Microsoft Deployment Image Servicing and Management (DISM) setupTo create, save, and deploy the configuration settings, complete the following the program using the / command-line the file Remove properties that you do not want to change and modify the other :Some properties, such as model and manufacturer, are read-only.

10 Such properties will be ignored with a warning if specified during :If a property value has not changed in the input configuration file from its existing value in BIOS, it will be skipped during /SetConfig. It is recommended to remove such settings during /SetConfig :If a property name or value is invalid or does not exist on the client system, such settings will be ignored with a warning during following example shows a configuration file that changes some properties:BIOSC onfig ;; Originally created by BIOS Configuration Utility; Version ; Date="2015-03-20" Time="14:37:40" UTC="-5";; Found 214 settingsAsset Tracking NumberCORPTAG001 ABCDEF4 Chapter 3 BIOS configurationRemovable Media BootEnable*DisableRemovable Media WriteEnable*DisableEnter Ownership Tagproperty of company XYZBoot OrderNetwork ControllerPnP Device#1 Hard Drive (C:)CD-ROM DriveIDE CD-ROM DriveMultibay Device (A: or CD-ROM)Diskette Drive (A:)USB deviceCover LockUnlock* with the / command-line parameter to apply the settings contained in notes The /Set and /Get functionality is supported on select commercial desktop, mobile, and workstation systems.