Powershell script for PC management: aprile 2019

mercoledì 24 aprile 2019

How to download drivers (HP softpaqs) using Powershell script

first you have to download HP Client Management (Powershell) Script library from https://ftp.hp.com/pub/caps-softpaq/cmit/hp-cmsl.html

after you installed the script , you have to create a folder where you want to save the softpaq.

example I create C:\SoftpackRepository

then I create a folder with the model name of my computer:
md C:\SoftpackRepository\Elitebook_840_G5
cd C:\SoftpackRepository\Elitebook_840_G5

in order to set this folder as a softpaq repository:
Initialize-Repository

it creates a subfolder .repository

now I have to add the model , providing sysID , OS and softpaq catergories I want o download

Add-RepositoryFilter -platform 83B2 -os win10 -osver 1809
or
Add-RepositoryFilter -platform 83B2 -os win10 -osver 1809 -catogory driver
or
Add-RepositoryFilter -platform 83B2 -os win10 -osver 1809 -catogory BIOS
or
Add-RepositoryFilter -platform 83B2 -os win10 -osver 1809 -catogory firmare
(see documentation for categories list , it will change. link https://developers.hp.com/hp-client-management/doc/softpaq-repository )

if you (john.doe@acme.com@acme.com) want to be informed if something goes wrong during softpaq download set these two parameters

Set-RepositoryNotificationConfiguration -server "smtp.acme.com" -username john.doe@acme.com -password "your_passwor" -from "softpaq-repo-sync@acme.com" -fromname "SOFTPAQ REPOSITORY NOTIFICATION"
Add-RepositorySyncFailureRecipient -to john.doe@acme.com@acme.com

these settings are saved in .repository\repository.json file

once the setting is done, just run
Invoke-RepositorySync

if after some weeks you want to update your folder
do these:
cd C:\SoftpackRepository\Elitebook_840_G5
Invoke-RepositorySync

if you want to remove obsolete softpaq or softpaq not matching the filters written in repository.json

cd C:\SoftpackRepository\Elitebook_840_G5
Invoke-RepositoryCleanup
.

you can repeat all steps for several models or read my next post about how to do it in a loop

how to flash the BIOS to a Remote PC (HP Businnes PC) using a client management tool

it's very simple to flash to BIOS of a remote PC if you have client management tool able to send a simple Powershell script to the HP Business PC.

Remote PC must have installed HP Client Management script library (https://ftp.hp.com/pub/caps-softpaq/cmit/hp-cmsl.html)

I have an HP Elitebook 840 G5 on my hands
using Get-HPDeviceProductID I got 83B2

if you already know the sysID of your PC, you can send a Powershell script with these two lines, from management console to your PC.

Get-hpbiosUpdates -platform 83B2 -download -saveas bios.bin ;
Update-HPFirmware -file bios.bin -bitlocker suspend ;

at next reboot or power on , the BIOS flash starts automatically and the user can't interrupt it unless user power off the PC.

you need to advice the user before to start a BIOS update, just to avoid him/her to block the update.

bitlocker must be restarted once Windows is running , sending another Powershell cmdlet

I tried for example with Absolute Software (even sold by HP) , which is able to send a script over Internet. It worked.

bye

martedì 23 aprile 2019

How to update the BIOS of PC over the network , "on premise" solution

in this post I explain how to update the BIOS of PCs in intranet without requiring the PC to access internet to get BIOS file.

I know several methods to update the BIOS of an HP Business PC. in this post I just describe how to update the BIOS of PC running Windows 10 , BIOS in UEFI mode and disk with GPT partition scheme.
I doesn't work if disk has MBR partitions in legacy mode.
as usual you need Powershell HP Client Management Script Library form here https://ftp.hp.com/pub/caps-softpaq/cmit/hp-cmsl.html , download and install the package on you management console.
Run a second time the installation package and extract the HP modules in C:\SWSetup\ps1.2\

As the script I wrote needs to access Windows Remote Management (WinRM) service running on the remote PC , the management console user must have the right to access WinRM service of the remote PC and be able to run an invoke-command on remote PC.
The script does these actions:

verifies that management console user is able to access WinRM of remote client, otherwise exit
creates an array of HP computers with these information:

model name , is a string of your preference
system ID , exadecimal number , used to identify the model
bios version, must match the format returned by HP cmdlet get-HPBIOSVersion
bios file name
you have to manually create this list or you can create it using another PS script.
example : ("840G5","83b2","1.06.00","Q78_010600.bin") , more in the script

gets information from remote PC: Model string , SysID and BIOS version
compares sysid and BIOS version with values written in the array.
if PC sysid is not found in array list , exit
if PC is found , BIOS version read from PC is compared with BIOS version in the array; if they match , exit
if BIOS versions are different , overwrite (update) the BIOS version of remote PC
HP PS scripts and BIOS.bin files are copied from management console to remote PC folder
an invoke-command will execute cmdlet UPdate-HPFirmware on remote PC
BIOS will be update at next reboot. user can't interrupt it

in order to have this script working, you must have on management console all BIOS files of your model.

you can use the script on my other post "How to quickly download the BIOS of your HP Business PC". both script must have the same model string.

this is my script

# !!!!!!!!!!!!!!!!!!!!!!!!!!!!
# HP CMS library MUST be extracted to 
# C:\SWSetup\ps1.2\ folder in order to work
# C:\SWSetup\ps1.2\Modules\HP.Firmware
# C:\SWSetup\ps1.2\Modules\HP.ClientManagement
# C:\SWSetup\ps1.2\Modules\HP.Softpaq
# C:\SWSetup\ps1.2\Modules\HP.Softpaq.Share
#
# This script dosen't requires remote PC accesses Internet
# script library AND BIOS file are provided to remote PC copying them from management console to remote PC 
# IT people have to download the BIOS file here: 'C:\SoftpaqRepository\bios\'+$modello+'\'+$biosfilename
# were $sysid is the motherboard sysID (uppercase) and biosfilename must match the the name founf on HP ftp site. see $HPcomputer array below
# before to start , I check if the PC answers to get-service WinRM -computername $ip_address , no answer means , either PC off or access denied
# this script read remote PC information from the BIOS , download information about last BIOS version from HP ftp site
# then update the BIOS of the remote PC copyng script and BIOS file to the remote PC, the remote execute the bios update
# Phase 1 : collecting info from remote PC : model , SysID , BIOS version
# Phase 2 : $HPComputer array is used to compare if remote PC already has latest BIOS version and listed in the array. 
#         : $HPComputer array must be manually build taking the information from FTP web site
#         : latest BIOS must ne on management console
# using 'switch' ,
#    1) if PC has last BIOS version already installed , do nothing .
#    2) if PC has a different BIOS version , it will be updated , using HP script : UPdate-HPFirmware -file bios.bin
#    3) if PC SysID is not found , write that PC is not managed

# these are the credential used in my lab.
# management console and Remote PC are in the same domain
# Labadmin user has Remote management capability on remote PC

$wmi_pass ="P@ssw0rd"
$wmi_user ="Labadmin"
$remote_pass = ConvertTo-SecureString -String $wmi_pass -AsPlainText -Force
$remote_credential = New-Object -typeName System.Management.Automation.PSCredential -ArgumentList $wmi_user, $remote_pass

import-module C:\SWSetup\PS1.2\Modules\HP.Softpaq.Shared\HP.Softpaq.Shared.psm1
import-module C:\SWSetup\PS1.2\Modules\HP.ClientManagement\HP.ClientManagement.psm1

param(
    [Parameter(Position = 0,Mandatory = $true)] $ip_address
    )

if ( get-service WinRM -computername $ip_address -ErrorAction SilentlyCOntinue) 
 {

[string [][][]] $HPcomputer = @(
("645G3","823a","1.24","P82_0124.bin"),
("X2_612_G2","828b","1.23","P86_0123.bin"),
("X2_1012_G2","82CA","1.25","P87_0125.bin"),
("X2_1013_G3","8414","1.06.00","Q87_010600.bin"),
("1030G2","827D","1.25","P80_0125.bin"),
("1030G3","8438","1.06.00","Q90_010600.bin"),
("1040G3","80FA","1.33","N83_0133.bin"),
("1040G4","8417","1.25","P96_0125.bin"),
("1040G5","8470","1.06.00","Q74_010600.bin"),
("1050G1","84E9","1.06.03","Q72_010603.bin"),
("840G3","8079","1.38","N75_0138.bin"),
("830G5","83b3","1.06.00","Q78_010600.bin"),
("840G5","83b2","1.06.00","Q78_010600.bin"),
("840rG4","8418","1.06.00","Q80_010600.bin"),
("735G5","83da","1.06.01","Q81_010601.bin"),
("745G5","83d5","1.06.01","Q81_010601.bin"),
("640G2","80FD","1.33","N76_0133.bin"),
("640G4","83d2","1.06.03","Q83_010603.bin"),
("650G4","8416","1.06.03","Q83_010603.bin"),
("650HG4","844A","1.06.03","Q83_010603.bin"),
("645G4","8401","1.06.01","Q82_010601.bin"),
("X360_440G1","84D8","1.06.00","Q98_010600.bin"),
("EliteOne1000G2","83E5","2.06.03","Q10_020603.bin"),
("800G4_DM_83E2","83E2","2.06.03","Q21_020603.bin"),
("800G4_DM_GPU_83E2","83E2","2.06.03","Q21_020603.bin"),
("800G4_DM_8409","8409","2.06.03","Q21_020603.bin"),
("800G4_DM_845A1809","845A","2.06.03","Q21_020603.bin"),
("EliteDesk800G4_TWR","83E0","2.06.03","Q01_020603.bin"),
("EliteDesk800G4_AIO_83E3","83E3","2.06.03","Q11_020603.bin"),
("EliteDesk800G4_AIO_83E4","83E4","2.06.03","Q11_020603.bin"),
("EliteDesk800G4_SFF","83E1","2.06.03","Q01_020603.bin"),
("EliteDesk705G4_SFF_83E8","83E8","2.04.01","Q16_020401.bin"),
("EliteDesk705G4_SFF_8462","8462","2.04.01","Q19_020401.bin"),
("EliteDesk705G4_SFF_8463","8463","2.04.02","Q15_020402.bin"),
("EliteDesk705G4_MT_83E7","83E7","2.04.02","Q15_020402.bin"),
("EliteDesk705G4_MT_8460","8460","2.04.02","Q15_020402.bin"),
("EliteDesk705G4_MT_8461","8461","2.04.02","Q05_020402.bin"),
("EliteDesk705G4_DM_83E9","83E9","2.04.01","Q26_020401.bin"),
("EliteDesk705G4_DM_8464","8464","2.04.02","Q27_020402.bin"),
("ProDesk600G4_MT_83EC","83EC","2.06.03","Q02_020603.bin"),
("ProDesk600G4_MT_PCI_83ED","83ED","2.06.03","Q02_020603.bin"),
("ProDesk600G4_MT_8580","8580","2.02.00","R04_020200.bin"),
("ProDesk600G4_SFF","83EE","2.01.09","Q07_020109.bin"),
("ProDesk600G4_DM","83EF","2.06.03","Q22_020603.bin"),
("EliteDesk600G4_AIO_83EA","83EA","2.06.03","Q12_020603.bin"),
("EliteDesk600G4_AIO_83EB","83EB","2.06.03","Q12_020603.bin"),
("ProDesk400G5_MT_83F0","83F0","2.06.00","Q03_020600.bin"),
("ProDesk400G5_MT_83F1","83F1","2.06.00","Q03_020600.bin"),
("ProDesk400G5_SFF","83F2","2.06.00","Q08_020600.bin"),
("ProDesk400G4_DM","83F3","2.06.00","Q23_020600.bin"),
("EliteDesk400G4_AIO_83EA","83EA","2.06.03","Q12_020603.bin"),
("EliteDesk400G4_AIO_83EB","83EB","2.06.03","Q12_020603.bin"),
("Zbook15G5","842A","1.06.03","Q70_010603.bin")
  )

write-host 'reading computer model'
  $PCmodel = get-HPDeviceModel -target $ip_address
  write-host 'reading computer sysid'
  $PCsysid= get-HPDeviceProductID -target $ip_address
  write-host 'reading computer BIOS version'
  $PCmodelbiosver = get-HPBIOSVersion -target $ip_address
  $sysfound = '0'
  write-host ''
  write-host ''

write-host 'Model is ' $PCmodel 'Current BIos version is' $PCmodelbiosver

foreach ($elemento in $HPcomputer) {
   $modello = $elemento[0]
   $sysid = $elemento[1]
   $lastesbiosver = $elemento[2]
   $biosfilename = $elemento[3]
   switch ( $PCsysid )  {
    $sysid { 
     switch ( $PCmodelbiosver ) { 
      $lastesbiosver { write-host $modello , $ip_address , 'already has latest BIOS version' $lastesbiosver ; $sysfound = '1' ; $adesso = (get-date).ToString() ; $line = $adesso+' , '+$modello+' , '+$ip_address+' , '+$lastesbiosver ; write-output $line >> logfile_already_latest.csv ; break } 
      default { 
       write-host 'copying Powershell script' ;
       $client1 = New-PSSession -ComputerName $ip_address -Credential $remote_credential ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.Firmware' -Force -Destination 'C:\users\public\Downloads' -ToSession $client1 -Recurse ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.ClientManagement'-Force -Destination 'C:\users\public\Downloads' -ToSession $client1 -Recurse ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.Softpaq' -Force -Destination 'C:\users\public\Downloads' -ToSession $client1 -Recurse ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.Softpaq.Shared\*' -Force -Destination 'C:\users\public\Downloads\HP.Softpaq' -ToSession $client1 -Recurse ;
       $biosbin = 'C:\SoftpaqRepository\bios\'+$modello+'\'+$biosfilename
       $sysfound = '1'
       copy-Item $biosbin -Force -Destination 'C:\users\public\Downloads\bios.bin' -ToSession $client1 ;
       invoke-command -ComputerName $ip_address -Credential $remote_credential -ScriptBlock { set-executionpolicy unrestricted ; cd 'C:\users\public\Downloads\HP.Firmware' ; import-module .\HP.Firmware.psm1; cd 'C:\users\public\Downloads\HP.ClientManagement' ;  import-module .\HP.ClientManagement.psm1; cd .. ; UPdate-HPFirmware -file bios.bin -bitlocker suspend ; $sysfound = '1'; break} 
      }
     }
    }
   } #end switch sysid

} #end froeach
  iif ($sysfound -ne '1' -and -NOT $biosfilename) { write-host 'model' $PCmodel 'is not in the list of managed computer' } # this should happen if the PCmodel in not avalable in pub/pcbios folder
 } #end if $status
else
{write-host 'host' $ip_address 'not found' ; $adesso = (get-date).ToString() ;  $line = $adesso+' , '+$ip_address+' , not found' ; write-output $line >> logfile_not_found.txt }

end of the scipt

lunedì 22 aprile 2019

How to update the BIOS of a PC over the network , from HP site

few people update the BIOS of their PCs but it's a best practice do it regularly.

there are several reasons for a BIOS update: improve security , remove BIOS bugs , add features

I know several methods to update the BIOS of an HP Business PC. in this post I just describe how to update the BIOS of PC running Windows 10 , BIOS in UEFI mode and disk with GPT partition scheme.
I doesn't work if disk has MBR partitions in legacy mode.

as usual you need Powershell HP Client Management Script Library form here https://ftp.hp.com/pub/caps-softpaq/cmit/hp-cmsl.html , download and install the package on you management console.
run a second time the installation packege and extract the HP module in C:\SWSetup\ps1.2\
As the script I wrote need to access Windows Remote Management (WinRM) service running on the remote PC , the management console user must have the right to access WinRM service of the remote PC and be able to run an invoke-command on remote PC.

The script do there actions:

verifies that management console user is able to access WinRM of remote client, otherwise exit
reads remote computer model, sysID , BIOS version
reads on HP web site which is latest BIOS version available for the remote PC sysID
if PC already has latest BIOS version, exit
if BIOS is not latest

powershell scripts are copied from management to remote PC
BIOS for remote PC is downloaded on the PC it-self
if volume is encrypted with bitlocker, it will be suspended
a BIOS update in scheduled on the remote PC
update will happens at next reboot

bitlocker must be resumed after BIOS update.

script doesn't check if BIOS is really updated. you can use another cmdlet to check current BIOS version of remote PC such as get-HPBIOSVersion -target $ip_address

this is my script , copy&paste into a .ps1 file.

# !!!!!!!!!!!!!!!!!!!!!!!!!!!!
# HP CMS library MUST be extracted to 
# C:\SWSetup\ps1.2\ folder in order to work
# C:\SWSetup\ps1.2\Modules\HP.Firmware
# C:\SWSetup\ps1.2\Modules\HP.ClientManagement
# C:\SWSetup\ps1.2\Modules\HP.Softpaq
# C:\SWSetup\ps1.2\Modules\HP.Softpaq.Share
#
# before to start , I check if the PC answers to get-service WinRM -computername $ip_address , no answer means , either PC off or access denied
# this script read remote PC information from the BIOS , download information about last BIOS version from HP ftp site
# then update the BIOS of the remote PC copyng script and BIOS file to the remote PC, the remote execute the bios update
# Phase 1 : collecting info from remote PC : model , SysID , BIOS version
# Phase 2 : collecting info from HP ftp site: last BIOS version , BIOS name , release date (using hp script: get-hpbiosUpdates)
# Phase 3 :
# using 'switch' ,
#    1) if PC has last BIOS version already installed , do nothing .
#    2) if PC has a different BIOS version , it will be updated , using HP script : get-hpbiosUpdates -saveas bios.bin ; UPdate-HPFirmware -file bios.bin
#    3) if PC SysID is not found , write that PC is not managed

param(
    [Parameter(Position = 0,Mandatory = $true)] $ip_address
    )
 
$wmi_pass ="P@ssw0rd"   # password dell utente di dominio
$wmi_user ="Labadmin"   # utente di dominio ch può eseguire script sulla macchina remota
$remote_pass = ConvertTo-SecureString -String $wmi_pass -AsPlainText -Force
$remote_credential = New-Object -typeName System.Management.Automation.PSCredential -ArgumentList $wmi_user, $remote_pass

import-module C:\SWSetup\PS1.2\Modules\HP.Softpaq.Shared\HP.Softpaq.Shared.psm1
import-module C:\SWSetup\PS1.2\Modules\HP.ClientManagement\HP.ClientManagement.psm1

if ( get-service WinRM -computername $ip_address -ErrorAction SilentlyCOntinue)  #verifica se sul computer remoto è attivo WinRM e se la console da cui si esegui lo script è in grado di accedere a WinREM
 {
  # phase 1 - collecting information from remote PC
  write-host 'reading computer model'
  $PCmodel = get-HPDeviceModel -target $ip_address   #read the PC model string ex "Elitebook 840 G5"
  write-host 'reading computer sysid'
  $PCsysid= get-HPDeviceProductID -target $ip_address  #read the PC sysID  string ex 83B2
  write-host 'reading computer BIOS version'
  $PCmodelbiosver = get-HPBIOSVersion -target $ip_address  #read the BIOS version installed on the remote PC
  $sysfound = '0'
 
  # phase 2 - collecting BIOS versione availability  of the remote PC , based on sysID  
  [string[]]$HPdati = @()
        [string[][][]]$dati = @()
  $HPdati = get-hpbiosUpdates -platform $PCsysid -latest -format list #find latest BIOS version from HP site
  $dati=$HPdati[0].split(' ').Trim()   #split information got with get-hpbiosUpdates
        write-host $dati[0]
        write-host $dati[1]
        write-host $dati[2]
     $latestbiosver = $dati[2].split(',').Trim()         # got from HP site with get-hpbiosUpdates  - this is the BIOS verssion ex  1.06.00
  $latestbiosfilename = $dati[0]     # got from HP site with get-hpbiosUpdates  - ex Q78_010600.bin
  $modello = $PCmodel  #read from remote PC
  write-host ''
  write-host ''
  write-host 'Model is ' $PCmodel 'Current BIos version is' $PCmodelbiosver , 'sysID' $PCsysid
        write-host $latestbiosver
        $sysid = $PCsysid #read from remote PC
  # phase 3 - check if installed BIOS is already latest and if we have a file name
        if ( $latestbiosver -eq $PCmodelbiosver  -and $latestbiosfilename) { 
                write-host $modello , $ip_address , 'already has latest BIOS version' $latestbiosver ; 
                $sysfound = '1' ; 
                $adesso = (get-date).ToString() ; $line = $adesso+' , '+$modello+' , '+$ip_address+' , '+$latestbiosver ; 
                write-output $line >> logfile_already_latest.csv ; 
                }
  # if BIOS is not latest , update it
        if ( $latestbiosver -ne $PCmodelbiosver -and $latestbiosfilename ) { 
       write-host 'copying Powershell script' ;
       $client1 = New-PSSession -ComputerName $ip_address -Credential $remote_credential ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.Firmware' -Force -Destination 'C:\users\public\Downloads' -ToSession $client1 -Recurse ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.ClientManagement'-Force -Destination 'C:\users\public\Downloads' -ToSession $client1 -Recurse ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.Softpaq' -Force -Destination 'C:\users\public\Downloads' -ToSession $client1 -Recurse ;
       copy-Item 'C:\SWSetup\ps1.2\Modules\HP.Softpaq.Shared\*' -Force -Destination 'C:\users\public\Downloads\HP.Softpaq' -ToSession $client1 -Recurse ;
 
       invoke-command -ComputerName $ip_address -Credential $remote_credential -ScriptBlock { 
                                        set-executionpolicy unrestricted ; 
                                        cd 'C:\users\public\Downloads\HP.Firmware' ; 
                                        import-module .\HP.Firmware.psm1; 
                                        cd 'C:\users\public\Downloads\HP.ClientManagement' ;  
                                        import-module .\HP.ClientManagement.psm1; cd .. ; 
                                        remove-item 'C:\users\public\Downloads\bios.bin' -Force -ErrorAction SilentlyContinue
                                        $PCsysid= get-HPDeviceProductID ;
                                        get-hpbiosUpdates -platform $PCsysid -download -saveas bios.bin ; 
                                        UPdate-HPFirmware -file bios.bin -bitlocker suspend ; 
                                        $sysfound = '1' ;
                                        
                                        } 
                            
      }

if ($sysfound -ne '1' -and -NOT $latestbiosfilename) { write-host 'model' $PCmodel 'is not in the list of managed computer' } # this should happen if the PCmodel in not avalable in pub/pcbios folder
 } #end if $status
else
# in case WinRM in not accessible or PC is not found in the network ....
{write-host 'host' $ip_address 'not found on the network or access denied' ; $adesso = (get-date).ToString() ;  $line = $adesso+' , '+$ip_address+' , not found' ; write-output $line >> logfile_not_found.txt }

#END

bye
Franco

venerdì 19 aprile 2019

How to quickly download the BIOS of your HP Business PC

This article explain how easy is to download latest BIOS of your PC

install HP Powershell Client management Script library as explained here:
https://bellalavitait.blogspot.com/2019/04/how-to-find-bios-versions-available-for.html

then in an Administrator Windows Powershell run:

get-hpbiosUpdates -download

bios file will be saved in current folder using his original name , example Q78_010600.bin

if you want to change name

get-hpbiosUpdates -download -saveas my_preferred_bios.bin

if you want to download a BIOS of another product, just add -platform XXX ,where XXXX is the system ID (see previous post)

get-hpbiosUpdates -download -platform 8414
get-hpbiosUpdates -download -platform 8414 -saveas X2_1013_G3.bios

in case you want to download latest BIOS for several models , then you need a script like the one just below

cd C:\SoftpaqRepository1.2\

[string[][]]$HPcomputer = @(
 ("645G3","823a"), 
 ("X2_612_G2","828b"), 
 ("X2_1012_G2","82CA"),
 ("X2_1013_G3","8414"),
 ("1030G2","827D"),
 ("1030G3","8438" ),
 ("1040G3","80FA"),
 ("1040G4","8417"),
 ("1040G5","8470"),
 ("1050G1","84E9"),
 ("840G3","8079"),
 ("830G5","83b3"),
 ("840G5","83b2"),
 ("840rG4","8418"),
 ("735G5","83da"),
 ("745G5","83d5"),
 ("640G2","80FD"),
 ("640G4","83d2"),
 ("650G4","8416"),
 ("650HG4","844A"),
 ("645G4","8401"),
 ("X360_440G1","84D8"),
 ("EliteOne1000G2","83E5"),
 ("800G4_DM_83E2","83E2"),
 ("800G4_DM_GPU_83E2","83E2"),
 ("800G4_DM_8409","8409"),
 ("800G4_DM_845A","845A"),
 ("EliteDesk800G4_TWR","83E0"),
 ("EliteDesk800G4_AIO_83E3","83E3"),
 ("EliteDesk800G4_AIO_83E4","83E4"),
 ("EliteDesk800G4_SFF","83E1"),
 ("EliteDesk705G4_SFF_83E8","83E8"),
 ("EliteDesk705G4_SFF_8462","8462"),
 ("EliteDesk705G4_SFF_8463","8463"),
 ("EliteDesk705G4_MT_8461","8461"),
 ("EliteDesk705G4_DM_83E9","83E9"),
 ("EliteDesk705G4_DM_8464","8464"),
 ("ProDesk600G4_MT_83EC","83EC"),
 ("ProDesk600G4_MT_PCI_83ED","83ED"),
 ("ProDesk600G4_MT_8580","8580"),
 ("ProDesk600G4_SFF","83EE"),
 ("ProDesk600G4_DM","83EF"),
 ("EliteDesk600G4_AIO_83EA","83EA"),
 ("EliteDesk600G4_AIO_83EB","83EB"),
 ("ProDesk400G5_MT_83F0","83F0"),
 ("ProDesk400G5_MT_83F1","83F1"),
 ("ProDesk400G5_SFF","83F2"),
 ("ProDesk400G4_DM","83F3"),
 ("EliteDesk400G4_AIO_83EA","83EA"),
 ("EliteDesk400G4_AIO_83EB","83EB"),
 ("Zbook15G5","842A")
)
[string[][][][]]$listabios = @()

foreach ($elemento in $HPComputer) {
$modello = $elemento[0]
$sysid = $elemento[1]
[string[]]$HPdati = @()

$HPdati = get-hpbiosUpdates -platform $sysid -latest -format csv

$dati=$HPdati[1].split(',').Trim()
$HPdati=$dati

write-host  """$modello"",""$sysid"","$HPdati[1],$HPdati[0]","$HPdati[2]

cd bios
md $modello -ErrorAction SilentlyContinue
cd $modello
get-hpbiosUpdates -platform $sysid  -download -ErrorAction SilentlyContinue
cd ..
cd ..
}
# SCRIPT END

script can be modified , removing from the list the models you aren't managing and adding what you need.
Create your own main folder. Then create a folder called "bios"
By default the script creates a new folder for each model in "bios" folder. The folder is named with the string written in the script. binary file is save inside the folder

example of model list included in the script
[string[][]]$HPcomputer = @(
("430G6_1809","8536"),
("440G6_1809","8537"),
("450G6_1809","8538"),
("645G3_1809","823a"),
("X2_612_G2_1809","828b"),
("X2_1012_G2_1809","82CA"),
("X2_1013_G3_1809","8414"),
("1030G2_1809","827D"),
("1030G3_1809","8438" ),
("1040G3_1809","80FA"),
("1040G4_1809","8417"),
("1040G5_1809","8470"),
("1050G1_1809","84E9"),
("840G3_1809","8079"),

I hope this can help you.

then if you want to update the BIOS of your PC , after you got the BIOS bin file, run

Update-HPFirmware -file bios.bin -bitlocker suspend

bitlocker suspend is useless if your hard disk is not encrypted with BitLocker

next post will be about how to update the BIOS of a remote computer., using HP CMS library

Bye
Franco

How to find BIOS versions available for HP Business PC

I'm not a Powershell expert , I do most of the scripts surfing the Internet to see what to others do.
In this post I explain how to use HP CMS library (CMS stands for Client management Script) to discover for a single computer or for a list of computer models which is latest BIOS version available from HP or the full history.

For HP Business PC I mean all notebooks , desktop, All-in-One, Slice , mobile workstation , desktop workstation produced by HP using an HP developed BIOS. so those HP CMS scripts don't work on HP consumer PCs or entry level business PC using a non-hp BIOS.

a list of products that should work with these HP CMS scripts could be this

Probook 400 and 600 series
Prodesk 400 and 600 series
Elitebook 700 , 800 and 1000 series
EliteDesk 700, 800 and 1000 series
mobile workstation zbook
Desktop workstation Z

some scripts works only with Windows 10 starting from 1709 version with BIOS set in UEFI mode.

As I'm able to check every single model and Windows 7 in legacy mode, it's up to you to try if you have older computers.

Powershell minimum version required is 3.0. I use version 5.

official HP link is this https://developers.hp.com/hp-client-management/doc/client-management-script-library

In this post I cover just an argument

steps:

download the HP CMS library from here https://ftp.hp.com/pub/caps-softpaq/cmit/hp-cmsl.html
install them
open a Administrator Windows Powershell
if needed change the security setting about PS script execution using this command

set-executionpolicy unrestricted

then execute one of these :

get-hpbiosUpdates
get-hpbiosUpdates -format csv
get-hpbiosUpdates -format list
get-hpbiosUpdates -format json

you will discover how many BIOS versions are available for your HP computer.
if you want to now only latest version available today , just add -latest to the above cmdlet

get-hpbiosUpdates -format list -latest

if you want to now the BIOS history of another model , add -platform XXXX to the above commands. XXXX stands for the exadecimal number that identify an HP motherboard. for example for HP Elite X2 1013 G3, the sys ID is 8414
you can discover sysID in various way. Using HP CMS , run this command to know sysID
on your computer run:

get-HPDeviceProductID

result is a 4 digit exadecimal number such as 83B2 if you have an Elitebook 840 G5

you can discover sys ID of a HP computer in your network using :

get-HPDeviceProductID - target host_name or IP_address
get-HPDeviceProductID -target 192.168.1.35

8414

then you can have the BIOS history of 8414

get-hpbiosUpdates -platform 8414

output will be

now , what if you want to know latest BIOS version of a known computer list ?

you have to create the list, including model name and sys ID and run the command for each model.

I created a script for these purpose.

The script includes the list and the functions needed to do the work for you

<#<br />

<#
SCRIPT BEGIN
download and install HP Client Management Script Library
https://ftp.hp.com/pub/caps-softpaq/cmit/hp-cmsl.html
mine main forder is cd C:\SoftpaqRepository1.2\

[string[][]]$HPcomputer = @(
 ("645G3","823a"), 
 ("X2_612_G2","828b"), 
 ("X2_1012_G2","82CA"),
 ("X2_1013_G3","8414"),
 ("1030G2","827D"),
 ("1030G3","8438" ),
 ("1040G3","80FA"),
 ("1040G4","8417"),
 ("1040G5","8470"),
 ("1050G1","84E9"),
 ("840G3","8079"),
 ("830G5","83b3"),
 ("840G5","83b2"),
 ("840rG4","8418"),
 ("735G5","83da"),
 ("745G5","83d5"),
 ("640G2","80FD"),
 ("640G4","83d2"),
 ("650G4","8416"),
 ("650HG4","844A"),
 ("645G4","8401"),
 ("X360_440G1","84D8"),
 ("EliteOne1000G2","83E5"),
 ("800G4_DM_83E2","83E2"),
 ("800G4_DM_GPU_83E2","83E2"),
 ("800G4_DM_8409","8409"),
 ("800G4_DM_845A1809","845A"),
 ("EliteDesk800G4_TWR","83E0"),
 ("EliteDesk800G4_AIO_83E3","83E3"),
 ("EliteDesk800G4_AIO_83E4","83E4"),
 ("EliteDesk800G4_SFF","83E1"),
 ("EliteDesk705G4_SFF_83E8","83E8"),
 ("EliteDesk705G4_SFF_8462","8462"),
 ("EliteDesk705G4_SFF_8463","8463"),
 ("EliteDesk705G4_MT_83E7","83E7"),
 ("EliteDesk705G4_MT_8460","8460"),
 ("EliteDesk705G4_MT_8461","8461"),
 ("EliteDesk705G4_DM_83E9","83E9"),
 ("EliteDesk705G4_DM_8464","8464"),
 ("ProDesk600G4_MT_83EC","83EC"),
 ("ProDesk600G4_MT_PCI_83ED","83ED"),
 ("ProDesk600G4_MT_8580","8580"),
 ("ProDesk600G4_SFF","83EE"),
 ("ProDesk600G4_DM","83EF"),
 ("EliteDesk600G4_AIO_83EA","83EA"),
 ("EliteDesk600G4_AIO_83EB","83EB"),
 ("ProDesk400G5_MT_83F0","83F0"),
 ("ProDesk400G5_MT_83F1","83F1"),
 ("ProDesk400G5_SFF","83F2"),
 ("ProDesk400G4_DM","83F3"),
 ("EliteDesk400G4_AIO_83EA","83EA"),
 ("EliteDesk400G4_AIO_83EB","83EB"),
 ("Zbook15G5","842A")
)
[string[][][][][]]$listabios = @()
 foreach ($elemento in $HPComputer) {

$modello = $elemento[0]
  $sysid = $elemento[1]
  [string[]]$HPdati = @()
  $HPdati = get-hpbiosUpdates -platform $sysid -latest -format csv
  $dati=$HPdati[1].split(',').Trim()
  $HPdati=$dati
  "{0,-28} , {1,4} , {2,-10} , {3,-18} , {4,12}" -f "$modello" ,  "$sysid" , $HPdati[0] , $HPdati[2] , $HPdati[1]
        
 }

#SCRIPT END

this is the formatted output

PS C:\SoftpaqRepository1.2> .\create_bios_list.ps1

you can modify the script at your convenience.

bye
Franco