BIOS Configuration Utility User Guide

HP BIOS Configuration Utility (BCU)User Guide

Copyright 20122014 Hewlett-PackardDevelopment Company, L.P.Microsoft, Windows, and Windows Vista areU.S. registered trademarks of the Microsoftgroup of companies.Confidential computer software. Validlicense from HP required for possession,use or copying. Consistent with FAR 12.211and 12.212, Commercial ComputerSoftware, Computer SoftwareDocumentation, and Technical Data forCommercial Items are licensed to the U.S.Government under vendor's standardcommercial license.The information contained herein is subjectto change without notice. The onlywarranties for HP products and services areset forth in the express warranty statementsaccompanying such products and services.Nothing herein should be construed asconstituting an additional warranty. HP shallnot be liable for technical or editorial errorsor omissions contained herein.Fourth Edition: March 2014First Edition: May 2012Document Part Number: 700600-004

About this guideThis guide uses the following styles to distinguish elements of text:Style Definition Variables or placeholders are enclosed in angle brackets.

For example, replace with the appropriatepath, such as C:\Windows\System. When typing theactual value for the variable, omit the brackets.

[optional parameters] Optional parameters are enclosed in square brackets. Whenspecifying the parameters, omit the brackets.

literal value Command line text that appears inside quotation marksshould be typed exactly as shown, including the quotationmarks.

Type When you are instructed to type information, type theinformation without pressing the Enter key.

Enter When you are instructed to enter information, type theinformation and then press the Enter key.

iii

iv About this guide

Table of contents1 Getting started .................................................................................................................................................. 1

What is HP BIOS Configuration Utility? ................................................................................................ 1System requirements ........................................................................................................................... 1Installation ............................................................................................................................................ 1

2 Command line parameters ................................................................................................................................ 2

3 BIOS configuration ............................................................................................................................................ 4WMI support required ........................................................................................................................... 4Replicated setup ................................................................................................................................... 4

Important notes .................................................................................................................... 5Password management ........................................................................................................................ 6Comments ............................................................................................................................................ 7

Appendix A Error codes ....................................................................................................................................... 8

Appendix B Sample configuration file ................................................................................................................ 10

Appendix C HP Password Encryption Utility ...................................................................................................... 13

v

vi

1 Getting startedWhat is HP BIOS Configuration Utility?

HP BIOS Configuration Utility (BCU) is a free utility that enables you to do the following: Read available BIOS settings and their values from a supported desktop, workstation, or

notebook computer Set or reset Setup Password on a supported desktop, workstation, or notebook computer Replicate BIOS settings across multiple client computers Add or remove BIOS user on a supported desktop, workstation, or notebook computerDownload the latest version of BCU from http://www.hp.com/go/clientmanagement.

System requirementsTable 1-1 Minimum hardware and software for clientsWindows XP Professional, Windows XP Professional x64, Windows Vista, Windows 7, Windows 8, Windows 8.1, orWindows PE*NOTE: BIOS setting management is supported under Windows PE 3.x, 4.0, or 5.0. See WMI support requiredon page 4

InstallationRun the BCU SoftPaq to install its contents to the folder \Hewlett-Packard\BIOS Configuration Utility\, where is the Program Files folder on thetarget system (e.g. C:\PROGRAM FILES). The resulting files at the target folder include: BIOSConfigUtility.exe BIOSConfigUtility64.exe BIOS Configuration Utility User Guide.pdf (this document)

What is HP BIOS Configuration Utility? 1

2 Command line parametersUse the following syntax to run BCU:BIOSConfigUtility.exe orBIOSConfigUtility64.exe The valid options are:Parameter Description/Get:"filename"

or/GetConfig:"filename"

Gets the configuration data.NOTE: If "filename" is empty, BCU writes configuration data to the outputconsole.

/Set:"filename"

or/SetConfig:"filename"

Modifies the system BIOS configuration. Accepts only REPSET formattedfiles.

/cspwdfile:filename

or/CurSetupPasswordFile:filename

Specifies the current BIOS Setup Password by providing password file.Current password should be provided when changing BIOS settings orpassword. Can specify only one current password file. Use HPQPswd.exeto generate password file. See Password management on page 6 foradditional details on this utility.NOTE: Requires BCU version 3.0.1.1 or later.

/nspwdfile:filename

or/NewSetupPasswordFile:filename

Specifies the new BIOS Setup Password by providing password file. Toremove the password, use /NewSetupPasswordFile:. Can specifyonly one new password file.NOTE: Clearing the BIOS Setup Password will remove all BIOS Users.Requires BCU version 3.0.1.1 or later.

/?

or/Help

Displays a help message.

/SetDefaults Sets BIOS settings to their default values.NOTE: /SetDefaults does not change every possible value; also, itdoes not change settings on an individual basis.

/verbose Displays details about each setting, such as failure code or reason forfailure.

/WarningAsErr Any settings ignored due to warnings will cause BCU to return error code13.NOTE: Requires BCU 3.0.11.1 or later. When both /verbose and /WarningAsErr are used, /WarningAsErr will take precedence.

2 Chapter 2 Command line parameters

Parameter Description/CreateUser:"username","passwordfile

Creates a new BIOS user. BIOS setup password must be set beforecreating BIOS user. To enable power-on password, create at least oneBIOS user.NOTE: Support for clear password in this command is removed as ofversion 3.0.7.1.

/DeleteUser:"username Deletes a BIOS user by name./cspwd:pwd

or/CurSetupPassword:pwd

Removed as of BCU version 3.0.1.1. Instead, use the options /cspwdfileor /CurSetupPasswordFile.

/nspwd:pwd

or/NewSetupPassword:pwd

Removed as of BCU version 3.0.1.1. Instead, use the options /nspwdfileor /NewSetupPasswordFile.

3

3 BIOS configurationBCU is a Windows-based tool that lets you create standard configuration settings and deploy themacross the enterprise. By creating a configuration text file with only the setting you want to change,you can deploy it to all systems in the enterprise. If a particular system does not support the specifiedsetting, it will be ignored.

WMI support requiredBCU requires HP custom WMI namespace and WMI classes (at the namespace root\HP\InstrumentedBIOS) provided by BIOS. BCU will only support models with a WMI-compliant BIOS,which are most commercial HP desktops, notebooks, and workstations.Before running BCU, it is helpful to make sure that the HP BIOS WMI classes are in the namespaceroot\HP\InstrumentedBIOS. When using BCU in WinPE, ensure that the WMI component is added tothe boot image using DISM.BIOS settings can also be managed through WMI by using the HP Client Management Interface (HPCMI Admins Toolkit). See the HP Client Management Solutions website at http://www.hp.com/go/clientmanagement for more information on HP CMI, including available software components,technical white papers, and sample scripts.

Replicated setupTo create, save, and deploy the configuration settings, complete the following procedure:1. Run the program BIOSConfigUtility.exe using the /GetConfig:config.txt command-line

parameter.2. Edit the file config.txt. Remove properties that you do not want to change and modify the other

properties.NOTE: Some properties, such as model and manufacturer, are read-only. Such properties willbe ignored with a warning if specified during /SetConfig.NOTE: If a property value has not changed in the input configuration file from its existing valuein BIOS, it will be skipped during /SetConfig. It is recommended to remove such settingsduring /SetConfig operation.NOTE: If a property name or value is invalid or does not exist on the client system, suchsettings will be ignored with a warning during /SetConfig.The following config.txt example shows a configuration file that changes some properties:

EnglishSettings file originally created by BIOS Config UtilityVersion: 3.0.7.1Date: 2013.12.09

Asset Tracking NumberCORPTAG001ABCDEF

4 Chapter 3 BIOS configuration

Removable Media BootEnable*Disable

Removable Media WriteEnable*Disable

Enter Ownership Tagproperty of company XYZ

Boot OrderNetwork ControllerPnP Device#1Hard Drive (C:)CD-ROM DriveIDE CD-ROM DriveMultibay Device (A: or CD-ROM)Diskette Drive (A:)USB device

Cover LockUnlock*Lock

3. Run BIOSConfigUtility.exe with the /SetConfig:config.txt command-line parameter toapply the settings contained in config.txt.

Important notes The /SetConfig and /GetConfig functionality is supported on select commercial desktop,

mobile, and workstation systems. Supported settings vary by model. The first line of the /Repset file must be the word English. The settings are indented with a tab character.

IMPORTANT: Indenting with space characters will not work. There is no space between /GetConfig or /SetConfig and the filename. Only passwords are guaranteed to take effect immediately and without a reboot. All other

settings are not guaranteed to take effect until after a reboot. The exact strings for some boot devices may vary between models. For example, the network

controller for Boot Order was identified with the tag PNP Device #1 on 1998 model Deskpro ENsystems and Network Controller on newer systems. If your environment includes a mix ofsystems, then ensure that all known values for a particular boot device are placed together in thelist relative to the next type of boot device. See the example above. Note that CD-ROM isspecified several different ways.

Replicated setup 5

It is recommended that you do not mix replicated setup changes with software updates thatinclude BIOS firmware updates. It is a best practice to perform each operation independentlyand to restart the system between either operation. This procedure accommodates cases inwhich the internal structure of BIOS configuration setting information changes between BIOSrevisions.

The /advanced switch, when used in conjunction with /GetConfig, will read the hidden BIOSsettings and write to the REPSET configuration file. The /advanced switch can also be usedwith /SetConfig to write hidden BIOS settings from the REPSET configuration file. It has noeffect on any other switches. For example:BIOSConfigUtility.exe /advanced /GetConfig:"config_filename"

Password managementBCU also has the ability to establish, modify, and remove the BIOS setup password. Use the HPPassword Encryption Utility (HPQPswd.exe) to create the password file needed to specify new orcurrent password. It is available at HP Client Management Solutions website at http://www.hp.com/go/clientmanagement. See HP Password Encryption Utility on page 13 for password utility usagesamples.Use the following sample command to create a setup password on a system with no existingpassword:BIOSConfigUtility.exe /nspwdfile:"new password.bin"Use the following sample command to modify the BIOS setup password use:BIOSConfigUtility.exe /nspwdfile:"new password.bin" /cspwdfile:"currentpassword.bin"Use the following sample command to remove the BIOS setup password use:BIOSConfigUtility.exe /nspwdfile:"" /cspwdfile:"current password.bin"

NOTE: A password change command can be combined with BIOS configuration, in which case thepassword is modified before the configuration is applied.BIOSConfigUtility.exe /set:"configuration.txt" /nspwdfile:"newpassword.bin"

6 Chapter 3 BIOS configuration

CommentsBCU configuration files support adding comments by using the ; (semicolon) character. Any line thatbegins with; is treated as a comment. The white space (including tab) in front of ; is ignored. Thecomment does not carry over to the next line.Example usage of comments:English; This file shows usage of comments in configuration files; Below is an example of comments using semicolon at beginning of lineSunday; *Disable; Enable

; Below is an example of comments using semicolon after white space (includes tab)Monday ;*Disable ;Enable

; Below is an example where the semicolon is NOT considered as a comment.Parallel Port IO=3BC; IRQ=7 IO=378; NOT comment

Comments 7

A Error codesTable A-1 Error codesError code Description Notes10 Valid password not provided. BCU was unable to find a valid password on the command line in

the following cases: When attempting to change the password, the correct

password was not provided. When attempting to change the password, the new password

did not satisfy password requirements for the platform. When attempting to change setting values, the correct

password was not provided.11 /SetConfig file not valid. BCU was unable to locate the configuration file or unable to read

the file at the specified path.12 First line in config file is not the word

English.First line in the configuration file must be the word English.

13 Failed to change setting. BCU failed to change one or more settings. Use /verbose or /WarningAsErr to get status per setting.

14 BCU not ready to write file. Not used.15 Command line syntax error. Possible reasons for this error include the following:

Invalid command line option specified. Use /? or /Help foravailable options.

Invalid combination of command line options used. Cannotspecify /SetDefaults and /GetConfig at same time.

Options /CurSetupPassword and /NewSetupPasswordare removed; use /CurSetupPasswordFile or /NewSetupPasswordFile instead.

Multiple password files were specified. Only one new orcurrent setup password file can be provided on commandline.

No configuration file name was specified with /SetConfig.16 Unable to write to file or system. BCU was unable to connect to BIOS in WMI. WMI classes are

corrupted or the system is not supported. See the section WMIsupport required on page 4 for additional information.

17 Help is invoked. Show BCU help text.18 Setting is unchanged. This return code is returned by BCU on a per setting basis when /

verbose or /WarningAsErr options are specified. Settings withthis return code are skipped when BCU attempts to write to BIOSand do not affect BCU return code.

19 Setting is read-only. This return code is returned by BCU on a per setting basis when /verbose or /WarningAsErr options are specified. Settings withthis return code are skipped when BCU attempts to write to BIOS.When /verbose is used, this return code generates a warning

8 Appendix A Error codes

Table A-1 Error codes (continued)Error code Description Notes

and does not affect the BCU return code. If /WarningAsErr isused, it results in BCU error code 13.

20 Invalid setting name. This return code is returned by BCU on a per setting basis when /verbose or /WarningAsErr options are specified. Settings withthis return code are skipped when BCU attempts to write to BIOS.When /verbose is used, this return code generates a warningand does not affect the BCU return code. If /WarningAsErr isused, it results in BCU error code 13.

21 Invalid setting value. This return code is returned by BCU on a per setting basis when /verbose or /WarningAsErr options are specified. Settings withthis return code are skipped when BCU attempts to write to BIOS.When /verbose is used, this return code generates a warningand does not affect the BCU return code. If /WarningAsErr isused, it results in BCU error code 13.

23 Unable to connect to HP BIOS WMInamespace.

System not supported. Unable to connect to HP BIOS WMInamespace: root\HP\InstrumentedBIOS. See the section WMIsupport required on page 4 for additional information.

24 Unable to connect to HP WMInamespace.

System not supported. Unable to connect to HP WMI namespace:root\HP. See the section WMI support required on page 4 foradditional information.

25 Unable to connect to PUBLIC WMInamespace.

System not supported. Unable to connect to PUBLIC WMInamespace: root\CIMV2. Ensure that WMI service is enabled andrunning.

30 Password file error. Unable to read or decrypt the password file.NOTE: Requires BCU version 3.0.1.1 or later.

9

B Sample configuration fileThis configuration file shows the list of BIOS settings for an HP ProBook 6460b:

EnglishManufacturer

Hewlett-PackardSystem Board ID

161DUniversal Unique Identifier(UUID)

8E086CEBBA31E11183421C85BF0CA029System Configuration ID

A0001D02Processor Type

Intel(R) Core(TM) i5-2520M CPUProduct Number

SP936UC#ABAWarranty Start Date

00/00/0000Processor Speed

2.50GHzSunday

*DisableEnable

Monday*DisableEnable

Tuesday*DisableEnable

Wednesday*DisableEnable

Thursday

10 Appendix B Sample configuration file

*DisableEnable

Friday*DisableEnable

Saturday*DisableEnable

Set Alarm Time00:00

PCID VersionA0.00

PCIDA0001D02

Define Custom URL

Memory Size4096 MB

BIOS Date08/26/2011

BIOS Version68SCE Ver. F.08

Serial NumberCNU147116F

Video BIOS RevisionINTEL 2089

Keyboard Controller Version97.45

Notebook Ownership Tag

Notebook Asset TagXYZ

Primary Battery Serial Number24778 10/10/2011

Serial port

11

Disable*Enable

Secondary Battery Serial NumberNo Battery Present

Parallel portDisable*Enable

Flash media readerDisable*Enable

USB PortDisable*Enable

...

12 Appendix B Sample configuration file

C HP Password Encryption UtilityThe HP Password Encryption Utility (HPQPswd.exe) accepts a password entered by the user,encrypts the password, and then stores it in a file for use by the BIOS. This utility can be used ineither command-line mode or GUI mode. To run it in GUI mode, double click the executable or runwithout parameters.The following is a sample command to create a password file in silent mode:HpqPswd.exe /s /p"12345678" /f"sample password.bin"In this example, /p specifies the password and /f specifies the name and path of the encrypted file.NOTE: Use the /? command to invoke help for additional information on the password utility.HPQPswd.exe currently supports a minimum password length of 8 characters and a maximum of 32characters.Older systems might support password lengths of less than eight characters; however, there aremany systems that require eight or more.This might present challenges in administering a broad base of model types. If you are using BIOSsetup passwords of less than eight characters, HP recommends updating your systems to use alonger password.

13

Getting startedWhat is HP BIOS Configuration Utility?System requirementsInstallation

Command line parametersBIOS configurationWMI support requiredReplicated setupImportant notes

Password managementComments

Error codesSample configuration fileHP Password Encryption Utility

/ColorImageDict > /JPEG2000ColorACSImageDict > /JPEG2000ColorImageDict > /AntiAliasGrayImages false /CropGrayImages true /GrayImageMinResolution 150 /GrayImageMinResolutionPolicy /OK /DownsampleGrayImages true /GrayImageDownsampleType /Bicubic /GrayImageResolution 150 /GrayImageDepth -1 /GrayImageMinDownsampleDepth 2 /GrayImageDownsampleThreshold 1.50000 /EncodeGrayImages true /GrayImageFilter /DCTEncode /AutoFilterGrayImages true /GrayImageAutoFilterStrategy /JPEG /GrayACSImageDict > /GrayImageDict > /JPEG2000GrayACSImageDict > /JPEG2000GrayImageDict > /AntiAliasMonoImages false /CropMonoImages true /MonoImageMinResolution 1200 /MonoImageMinResolutionPolicy /OK /DownsampleMonoImages true /MonoImageDownsampleType /Bicubic /MonoImageResolution 600 /MonoImageDepth -1 /MonoImageDownsampleThreshold 1.33333 /EncodeMonoImages true /MonoImageFilter /CCITTFaxEncode /MonoImageDict > /AllowPSXObjects true /CheckCompliance [ /None ] /PDFX1aCheck false /PDFX3Check false /PDFXCompliantPDFOnly false /PDFXNoTrimBoxError true /PDFXTrimBoxToMediaBoxOffset [ 0.00000 0.00000 0.00000 0.00000 ] /PDFXSetBleedBoxToMediaBox true /PDFXBleedBoxToTrimBoxOffset [ 0.00000 0.00000 0.00000 0.00000 ] /PDFXOutputIntentProfile (None) /PDFXOutputConditionIdentifier () /PDFXOutputCondition () /PDFXRegistryName (http://www.color.org) /PDFXTrapped /False

/CreateJDFFile false /SyntheticBoldness 1.000000 /Description >>> setdistillerparams> setpagedevice