Users Guide

Setting BIOS attributes in the system running Linux

You can set BIOS attributes using any of the following methods:

• Using OMICLI

• Using WinRM

• Using WSMan

NOTE: Ensure that the OMI server is started and running.

Setting BIOS attributes using OMICLI

You can set BIOS attributes using the SetBIOSAttributes method. The procedure is explained below using a task of enabling the Trusted

Platform Module (TPM) as an example.

NOTE: Make sure the TPM option is cleared in the BIOS before following the procedure to enable the TPM.

To set the BIOS attributes using OMICLI commands:

1. To set the BIOS password on the system if not set already, run

./omicli iv root/dcim/sysman { DCIM_BIOSService Name DCIM:BiosService

SystemCreationClassName DCIM_ComputerSystem SystemName <system name displayed in

DCIM_BIOSService class> CreationClassName DCIM_BIOSService } SetBIOSAttributes

{ AttributeName "AdminPwd" AttributeValue “<new Admin Password>” }

2. To enable the TPM security use the following command, run

./omicli iv root/dcim/sysman { DCIM_BIOSService Name DCIM:BiosService

SystemCreationClassName DCIM_ComputerSystem SystemName <system name displayed in

DCIM_BIOSService class> CreationClassName DCIM_BIOSService } SetBIOSAttributes

{ AttributeName "Trusted Platform Module" AttributeValue “1” AuthorizationToken

“<password>”

3. Restart the system.

4. To activate the TPM, run

./omicli iv root/dcim/sysman { DCIM_BIOSService Name DCIM:BiosService

SystemCreationClassName DCIM_ComputerSystem SystemName <system name displayed in

DCIM_BIOSService class> CreationClassName DCIM_BIOSService } SetBIOSAttributes

{ AttributeName " Trusted Platform Module Activation" AttributeValue “2”

AuthorizationToken “<password>” }

5. Restart the system.

6. To reset BIOS password, run

./omicli iv root/dcim/sysman { DCIM_BIOSService Name DCIM:BiosService

SystemCreationClassName DCIM_ComputerSystem SystemName <system name displayed in

DCIM_BIOSService class> CreationClassName DCIM_BIOSService } SetBIOSAttributes

{ AttributeName "AdminPwd" AttributeValue “” AuthorizationToken “<password>” }

Setting BIOS attributes using WinRM

You can set BIOS attributes using the SetBIOSAttributes method. The procedure is explained below using a task of enabling the Trusted

Platform Module (TPM) as an example.

NOTE: Ensure the TPM option is cleared in the BIOS before following the procedure to enable the TPM.

To set the BIOS attributes using WinRM commands:

1. Get the selector set by enumerating the DCIM_BIOSService class. Run:

winrm e wsman/DCIM_BIOSService?__cimnamespace=root/dcim/sysman -auth:basic -r:https://

<system IP or system name>:<Port Number (5985/5986)> -username:<user name> -

password:<password> -skipCAcheck -skipCNcheck -encoding:utf-8 -returnType:epr

Using Dell Command | Monitor 10.3