Overview
...
Environment
MiWorkspace, Platform as a Service Windows systems will set a BIOS password on systems. , Campus Computing Sites, DSW
Issue
BIOS passwords being set for MiWorkspace certified models
Resolution
BIOS passwords are now set as part of the on-campus build process (OSD), "BIOS and Driver Update Task Sequence" (TS), and any Windows OS in-place upgrade (IPU) process for all MiWorkspace supported Dell, HP, and Lenovo hardware models. Microsoft devices are not currently receiving BIOS passwords. BIOS passwords will not be pushed to existing machines but will only be set in the methods listed above.
BIOS passwords provide a security measure to protect system configuration and security settings. They are also needed because HP will no longer help us reset unknown BIOS Passwordsreset BIOS passwords, so computers with unknown passwords are a risk as this could cause them to be unmanageable and could prevent them from ever being rebuilt.
Affected Models
Beginning in September 2019, BIOS passwords will be are set automatically during OSD and IPU for the following models:
HP
...
HP Z2 Workstation models
...
HP Z4 Workstation models
...
Dell Precision Tower 3430
...
Dell Precision 5530
Questions and Answers
Q: Will additional models get BIOS passwords in the future?
A: Yes. BIOS passwords will be added for additional models.
Q: Will all BIOS passwords be added for all MiWorkspace models.
A: There are no plans to add BIOS passwords for every MWS supported PC model. Older models and models with small numbers of systems in production may not have support for BIOS passwords added to the OSD task sequence.
All supported models
Dell
All supported models
Lenovo
All supported models
Questions and Answers
Q: Will BIOS passwords be set on systems that are already in use?
A: There are no plans to add BIOS passwords on supported models that are already in use by customers. However, BIOS passwords may be added at the time that systems are rebuilt using the OSD task sequence or , during a Windows 10 OS upgrade.
Q: Can I be provided with the BIOS password that I can adjust BIOS settings on a device in my department?
A: Yes. IT staff in Platform as a Service units can obtain the BIOS password by contacting the MiWorkspace Windows Engineering Team at euc-win-support@umich.edu.in-place upgrades, or when running the "BIOS and Driver Update Task Sequence".
Q: Why is it important that a BIOS password be set?
A: Because BIOS passwords provide a security measure to protect system configuration and security settings. They are also needed because HP will no longer reset the BIOS passwords, so computers with unknown passwords are a risk as this could cause them to be unmanageable , and could prevent them from ever being rebuilt.
Q: How can I obtain the MiWorkspace BIOS password?
A: Access to the BIOS password can be granted upon verification of the requestor. Inquiries can be made on Slack in the #its-miworkspace-win-tier3 channel.