Dell Command | Endpoint Configure for Microsoft Intune (DCECMI) provides a way to configure and secure the BIOS configurations on Dell systems via Microsoft Intune.
Dell Command | Endpoint Configure for Microsoft Intune allows a secure package-based approach to push custom BIOS settings. These BIOS settings are configured using the Dell Command | Configure application and then applied to the BIOS using DCECMI at the endpoint.
Custom BIOS configuration profiles can be crafted based on IT environment needs such as Security, Privacy, Performance, etc. and can be assigned to various device groups. The installation is a BIOS configuration based profile. The design of this system is secure and prevents any security gaps for the customers. Microsoft Intune administrative users can now manage the BIOS settings of a fleet of Dell devices.
Important Notes
NOTE: From Microsoft Intune version 2405, the hardwarePasswordDetail Application Programming Interface (API) will be available to fetch BIOS passwords.
NOTE: Along with the hardwarePasswordDetail Application Programming Interface (API), deleting the BIOS password information will also be supported for the devices that are unenrolled from Microsoft Intune. A user with administrator privileges can delete the BIOS password information from the Microsoft Intune database.
NOTE: The hardwarePasswordInfo Application Programming Interface (API) will be deprecated soon; the Application Programming Interface (API) may be deprecated from Microsoft Intune version 2406.
NOTE: From Microsoft Intune version 2404, List hardwarePasswordInfos will require Global Administrator privileges.
Features
- Secure BIOS configurations for customers through the use of Microsoft Intune.
- A Microsoft Intune administrative user can:
- Manage their Dell client device's BIOS configurations.
- Obtain a report of their Client devices' configuration status.
- Deploy a unique-per-device BIOS password.
- The design of this system is native to Microsoft Intune and does not require external Application Programming Interface (API) authorization, configuration, or access.
Prerequisites for Microsoft Intune Dell BIOS Configuration management
- You must have a Dell commercial client with Windows 10 or later operating system.
- The device must be enrolled in Intune's mobile device management (MDM).
- .NET 6.0 runtime for Windows x64 must be installed on the device.
- Dell Command | Endpoint Configure for Microsoft Intune (DCECMI) must be installed on the endpoint.
NOTE: Intune application deployment can also be used to deploy .NET 6.0 runtime for Windows x64 and DCECMI applications to the endpoints.
NOTE: Use the command dotnet --list-runtimes from command prompt to check if the .NET 6.0 runtime for Windows x64 is installed on the device.
NOTE: Only administrative users can install, modify, or uninstall the DCECMI application.
NOTE: Before deploying a BIOS configuration profile, see
Important considerations when deploying a BIOS configuration profile in the
DCECMI User's Guide for more details.
Downloads
Documentation