Firmware
This module provides functionality for interfacing with the HP BIOS firmware.
Some functionality may not be available on all platforms, or on all generations of a platform.
Important: As we are moving towards deprecating support for 32-bit PowerShell, we recommend only running the firmware functions under 64-bit PowerShell. Special care may need to be taken to enable 64-bit execution when using SCCM, MEM, or other tools where execution may default to 32-bit.
Firmware update
| Function | Description |
|---|---|
| Update-HPFirmware | Update HP BIOS and associated firmware from a UEFI capsule or BIOS binary file |
Legacy BIOS password
| Function | Description |
|---|---|
| Write-HPFirmwarePasswordFile | Create a BCU-style password file from the specified password |
Firmware logs
| Function | Description |
|---|---|
| Get-HPFirmwareAuditLog | Retrieve the firmware audit log. |
Boot logo
| Function | Description |
|---|---|
| Get-HPFirmwareBootLogoIsActive | Test if a custom boot logo is active |
| Clear-HPFirmwareBootLogo | Clear any custom boot logo and revert back to the standard HP logo |
| Set-HPFirmwareBootLogo | Replace the boot logo with a custom logo |
HP Secure Platform Management
| Function | Description |
|---|---|
| Get‐HPSecurePlatformState | Retrieve the current state of the Secure Platform provisioning |
| New‐HPSecurePlatformEndorsementKeyProvisioningPayload | Create a new Secure Platform Endorsement Key provisioning payload |
| New‐HPSecurePlatformSigningKeyProvisioningPayload | Create a new Secure Platform Signing Key provisioning payload |
| New‐HPSecurePlatformDeprovisioningPayload | Create a new Secure Platform deprovisioning payload |
| Set-HPSecurePlatformPayload | Apply a payload created with one of the New-* commands above |
HP Sure Recover
| Function | Description |
|---|---|
| Get-HPSureRecoverState | Retrieve the current state of the HP Sure Recover provisioning |
| Get‐HPSureRecoverReimagingDeviceDetails | Retrieve the current state of the HP Sure Recover reimaging device |
| New‐HPSureRecoverConfigurationPayload | Create a new HP Sure Recover configuration payload |
| New‐HPSureRecoverImageConfigurationPayload | Create a new HP Sure Recover image provisioning payload |
| New‐HPSureRecoverSchedulePayload | Create a new HP Sure Recover schedule payload |
| New‐HPSureRecoverTriggerRecoveryPayload | Create a new HP Sure Recover trigger payload |
| New‐HPSureRecoverDeprovisionPayload | Create a new HP Sure Recover deprovisioning payload |
| Invoke‐HPSureRecoverTriggerUpdate. | Invoke a recovery |
HP Sure View
| Function | Description |
|---|---|
| Get-HPSureViewState | Get the state of the HP Sure View electronic privacy filter, where available. |
| Test-HPSureViewIsSupported | Test whether HP Sure View is supported. |
| Set-HPSureViewState | Set HP Sure View State |
HP Sure Admin
| Function | Description |
|---|---|
| Get-HPSureAdminState | Get the current state of the HP Sure Admin feature |
| New-HPSureAdminEnablePayload | Generate a payload for enabling the HP Sure Admin feature |
| New-HPSureAdminDisablePayload | Generate a payload for disabling the HP Sure Admin feature |
| Send-HPSureAdminLocalAccessKeyToKMS | Send a local access key in PFX format to HP Sure Admin Key Management Service (KMS) |
| Clear-HPSureAdminKMSAccessToken | Clear the KMS access token |
| Convert-HPSureAdminCertToQRCode | Generate a QR-Code for transferring the private key from a certificate file to the HP Sure Admin phone app |
| New-HPSureAdminBIOSSettingValuePayload | Generate a payload for authorizing a single BIOS setting change |
| New-HPSureAdminBIOSSettingsListPayload | Generate a payload for authorizing multiple BIOS setting changes |
| New-HPSureAdminFirmwareUpdatePayload | Generate a payload for authorizing a firmware update |
| New-HPSureAdminLocalAccessKeyProvisioningPayload | Generate a payload for provisioning a local access key |
| New-HPSureAdminSettingDefaultsPayload | Generate a payload for resetting BIOS settings to default values |
| Add-HPSureAdminSigningKeyToKMS | Add a signing key in PFX format to HP Sure Admin Key Management Service (KMS) |
| Remove-HPSureAdminSigningKeyFromKMS | Remove a signing key from HP Sure Admin Key Management Service (KMS) |
| Add-HPSureAdminDevicePermissions | Add one device permissions to HP Sure Admin Key Management Service (KMS) |
| Get-HPSureAdminDevicePermissions | Get device permissions from the HP Sure Admin Key Management Service (KMS) |
| Edit-HPSureAdminDevicePermissions | Edit one existing device permissions to HP Sure Admin Key Management Service (KMS) |
| Remove-HPSureAdminDevicePermissions | Remove a device permission from the HP Sure Admin Key Management Service (KMS) |
| Search-HPSureAdminDevicePermissions | Search device permissions on HP Sure Admin Key Management Service (KMS) |
| Set-HPSureAdminDevicePermissions | Set one or multiple device permissions on the HP Sure Admin Key Management Service (KMS) |