-
Notifications
You must be signed in to change notification settings - Fork 12
/
Install-DellBiosUpdate.ps1
145 lines (145 loc) · 7.76 KB
/
Install-DellBiosUpdate.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
#script Install-DellBiosUpdate
#
# Pre-load the BIOS password in a variable if running against a remote system.
# $SecureBiosPw = Read-Host -Prompt 'Enter the BIOS Password' -AsSecureString
# Then pass it to 'Invoke-Command' with the 'ArgumentList' parameter.
#
[CmdletBinding()]
param (
[System.Security.SecureString] $SecureBiosPw,
[string] $BiosPw,
[string] $CatalogArchiveName = 'CatalogPC.cab',
[string] $CatalogFileName = 'CatalogPC.xml',
[string] $DellDownloadRoot = 'https://downloads.dell.com',
[string] $Flash64ZipName = 'Flash64W.zip',
[string] $Flash64Uri = "$DellDownloadRoot/FOLDER04165397M/1/$Flash64ZipName",
[string] $CatalogArchiveUri = "$DellDownloadRoot/catalog/$CatalogArchiveName",
[string] $LocalBasePath = "$env:ProgramFiles\$(([System.Guid]::NewGuid().Guid))",
[string] $TempFile = "$LocalBasePath\$(([System.Guid]::NewGuid().Guid)).txt",
[string] $Flash64Zip = "$LocalBasePath\$Flash64ZipName",
[string] $LocalCatalogArchivePath = "$LocalBasePath\$CatalogArchiveName",
[string] $LocalCatalogFilePath = "$LocalBasePath\$CatalogFileName"
) #param
process {
if (($PSBoundParameters.ContainsKey('SecureBiosPw'))) {
$BiosPw = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($SecureBiosPw))
} elseif (-not ($PSBoundParameters.ContainsKey('SecureBiosPw'))) {
if (($PSBoundParameters.ContainsKey('BiosPw'))) {
Write-Verbose -Message 'Using the passed-in plaintext BIOS password.'
} elseif (-not ($PSBoundParameters.ContainsKey('BiosPw'))) {
$SecureBiosPw = Read-Host -Prompt 'Enter the BIOS Password' -AsSecureString
$BiosPw = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($SecureBiosPw))
} #if ($PSBoundParameters.ContainsKey('BiosPw'))
} #if ($PSBoundParameters.ContainsKey('SecureBiosPw'))
if (-not (Test-Path -Path $LocalBasePath)) {
New-Item -Path $LocalBasePath -ItemType Directory | Out-Null
} #if (-not (Test-Path -Path $LocalBasePath))
$TempDir = Get-Item -Path $LocalBasePath
$WebClient = New-Object -TypeName System.Net.WebClient
$SplatArgs = @{ Namespace = 'root/cimv2'
ClassName = 'Win32_ComputerSystem'
Property = 'Manufacturer','Model','SystemFamily','SystemSKUNumber' }
$ComputerSystem = Get-CimInstance @SplatArgs
$SplatArgs = @{ Namespace = 'root/cimv2'
ClassName = 'Win32_BIOS'
Property = 'SMBIOSBIOSVersion' }
$CurrentBios = (Get-CimInstance @SplatArgs).SMBIOSBIOSVersion
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
Write-Verbose -Message "Downloading the Dell catalog archive."
$WebClient.DownloadFile("$CatalogArchiveUri","$LocalCatalogArchivePath")
while (-not (Test-Path -Path $LocalCatalogArchivePath)) {
Start-Sleep -Seconds 1
} #while
$ExpandArgs = "`"$LocalCatalogArchivePath`" -F:$CatalogFileName `"$LocalCatalogFilePath`""
$SplatArgs = @{ FilePath = 'C:\Windows\System32\expand.exe'
ArgumentList = $ExpandArgs
NoNewWindow = $true
Wait = $true
RedirectStandardOutput = $TempFile }
Write-Verbose -Message "Expanding the archive."
Start-Process @SplatArgs | Out-Null
Remove-Item -Path $TempFile | Out-Null
while (-not (Test-Path -Path $LocalCatalogFilePath)) {
Start-Sleep -Seconds 1
} #while
$DriverCatalogXml = (Get-Content -Path $LocalCatalogFilePath -Raw) -as [xml]
$DownloadBase = $DriverCatalogXml.Manifest.baseLocation
Write-Verbose -Message 'Selecting BIOS update.'
$InstallerFile = $DriverCatalogXml.Manifest.SoftwareComponent |
Where-Object {
$_.SupportedSystems.Brand.Model.systemID -eq $ComputerSystem.SystemSKUNumber -and
$_.ComponentType.value -eq 'BIOS'
} | Sort-Object -Property dateTime -Descending | Select-Object -First 1
if (-not ($InstallerFile.dellVersion -eq $CurrentBios)) {
Write-Verbose -Message "'$($InstallerFile.dellVersion)' is newer that the installed BIOS version, preparing for update."
$InstallerUri = "https://$DownloadBase/$($InstallerFile.path)"
$InstallerFileName = $InstallerUri.Split('/') | Select-Object -Last 1
$InstallerLocalPath = Join-Path -Path $LocalBasePath -ChildPath $InstallerFileName
Write-Verbose -Message "Downloading $InstallerFileName"
$WebClient.DownloadFile("$InstallerUri","$InstallerLocalPath")
while (-not (Test-Path -Path $InstallerLocalPath)) {
Start-Sleep -Seconds 1
} #while
$WebClient.DownloadFile("$Flash64Uri","$Flash64Zip")
while (-not (Test-Path -Path $Flash64Zip)) {
Start-Sleep -Seconds 1
} #while
$Flash64Dir = Join-Path -Path $LocalBasePath -ChildPath 'Flash64Dir'
$ProgPrefBak = $ProgressPreference
$ProgressPreference = [System.Management.Automation.ActionPreference]::SilentlyContinue
Get-Item -Path $Flash64Zip | Expand-Archive -DestinationPath $Flash64Dir
$ProgressPreference = $ProgPrefBak
$Flash64 = Get-ChildItem -Path $Flash64Dir -Filter *.exe
$Flash64 | Unblock-File
Write-Verbose -Message 'Suspending BitLocker'
Suspend-BitLocker -MountPoint 'C:' -RebootCount 1 -Confirm:$false | Out-Null
$BiosArgs = "/s /f /b=`"$InstallerLocalPath`" /p=`"$BiosPw`" /l=`"$TempFile`""
$SplatArgs = @{ FilePath = "$($Flash64.FullName)"
ArgumentList = $BiosArgs
NoNewWindow = $true
Wait = $true }
Write-Verbose -Message "Running $InstallerFileName"
Start-Process @SplatArgs
$BiosOutput = Get-Content -Path $TempFile -Raw
Remove-Item -Path $TempFile | Out-Null
if ($BiosOutput -match 'Password\ Validation\ failure') {
$BiosStatus = $false
$Reason = 'BIOS Flash Failed: Bad Password'
} elseif (($BiosOutput -match 'BIOS\ flash\ started') -and ($BiosOutput -match 'BIOS\ flash\ finished')) {
$BiosStatus = $true
$Reason = 'BIOS Flash Succeeded: Rebooting'
} #if
if ($BiosStatus) {
$EventObject = New-Object -TypeName psobject -Property @{
TimeStamp = [datetime] (Get-Date)
ComputerName = $env:COMPUTERNAME
Bios = [string] $InstallerFileName
Message = $Reason
} #New-Object
$EventObject | Select-Object -Property TimeStamp,ComputerName,Bios,Message
Restart-Computer -Force
} elseif (-not $BiosStatus) {
$EventObject = New-Object -TypeName psobject -Property @{
TimeStamp = [datetime] (Get-Date)
ComputerName = $env:COMPUTERNAME
Bios = [string] $InstallerFileName
Message = $Reason
} #New-Object
$EventObject | Select-Object -Property TimeStamp,ComputerName,Bios,Message
} #if
} elseif ($InstallerFile.dellVersion -eq $CurrentBios) {
Write-Verbose -Message "The current BIOS version '$CurrentBios', matches the latest version from the Dell catalog, skipping."
$EventObject = New-Object -TypeName psobject -Property @{
TimeStamp = [datetime] (Get-Date)
ComputerName = $env:COMPUTERNAME
Bios = $null
Message = "$CurrentBios is current, skipping."
} #New-Object
$EventObject | Select-Object -Property TimeStamp,ComputerName,Bios,Message
} #if
Write-Verbose -Message 'Cleaning up'
if (Test-Path -Path $($TempDir.FullName)) {
$TempDir | Remove-Item -Recurse -Force
} #if
} #process
#script Install-DellBiosUpdate