Dell Client Management Newsletter – 2024 February

Dell Command Update

A new version of Dell Command Update is available.

Get it here: Dell Command | Update | Dell US

Documentation can be found here: Support for Dell Command | Update | Documentation | Dell US

The release Notes can be found here: Dell Command | Update 5.x Release Notes

Dell Command | Update provides the following features and enhancements in this release:

Enhanced the administrative template feature.
Added the capability to roll out updates gradually.
Added the capability to set a delay for updates.
Enhanced the defer reboot feature to notify you 30 minutes before a mandatory reboot.
Enhanced the security measures by upgrading third party components to higher versions.
Optimized the payload size during driver scan to save network bandwidth.
Enhanced the security measures in line with Microsoft VBScript deprecation.

Dell Command Update can be configured using Intune, and by importing the ADMX files, it is done like this:

To extract the ADMX files download the Dell Command Update installation file. Run the installation program.

Dell-Command-Update-Application_4R78G_WIN_5.2.0_A00.EXE

Select only to EXTRACT the content:

Browse to folder where you want to extract the files and press ok.

Press view Folder, or manually go to the folder you select previously.

The content should look like this:

You need to import the ADMX file and the ADML file at the same time in Intune:

First import Dell.ADMX and DELL.adml,

Go to Templates:

Here you will find the ADMX files.

Go to the en-US folder.

Here you will find the ADML files.

Repeat the import for Dell Command Update ADMX and Dell Command Update.ADML.

Another great feature is the option to delay updates. So, the updates can be configured to install all updates for Test users when they are for example 5 days old, and the rest of the house only get updates after they are 15 days old. By that you can minimize failures.

Reach out to us if you need more help.

Dell Trusted Device – new version 6.1.2.0

With the new version of Dell Trusted Device Agent, we introduce a new dashboard-view providing administrators security scores of their fleet.

This helps administrators in case any action is required.

The Dell Trusted Device agent is part of the Dell SafeBIOS product portfolio. The Trusted Device agent includes the following:

BIOS Verification
BIOS Events & Indicators of Attack
Image Capture
Intel ME Verification
Secured Component Verification (On Cloud)
Security Risk Protection Score
Dell Event Repository and SIEM integration

BIOS Verification provides customers with affirmation that devices are secured below the operating system, a place where IT administrator visibility is lacking. It enables customers to verify BIOS integrity using an off-host process without interrupting the boot process. After the Trusted Device agent runs on the endpoint, a pass or fail result (0 or 1) displays in some of these locations:

Web browser
Command line
Registry entry
Event Viewer
Logs

Find all details here: admin guide

Dell Response to TPM Interposer Bitlocker Research

During the last weeks, we have had many customers raising a concern regarding the following youtube-clip that has been circulating: Breaking Bitlocker – Bypassing the Windows Disk Encryption (youtube.com)

Researchers have demonstrated the ability to intercept and extract BitLocker keys as they are sent over the bus between the CPU and the discrete TPM on certain PC models. Researchers used physical access to the electrical traces on the system motherboard and specific knowledge of the layout and routing of the target PC to perform their demonstrations. Dell commercial PCs use a discrete TPM, and this article describes the degree to which Dell’s implementation of Microsoft’s BitLocker in Dell commercials PCs may be susceptible to this attack method.

Please click the link to see our official statement:

Dell Response to TPM Interposer BitLocker Research | Dell US

Product Carbon Footprint

Dell has a high focus on limiting the CO2 outlet. If you want to get help on limiting the outlet of CO2, we have created an easy place to see the CO2 footprint of our products:

Product Carbon Footprint (PCF) | Dell USA

And the clients can be found here: Product Carbon Footprint (PCF) | Dell USA

If we as an example look at the carbon footprint of the Latitude 7440, it looks like this: