How to clear known BIOS password (Dell)

Question

How to clear known BIOS password (Dell)

lupinlicious 136

Hello,

I'm trying to put something together, so I can with ease change BIOS password.

The script is supposed to check the BIOS current password and then change it to a new password

Function Clear-DellAdminPassword {


    BEGIN {
        # Define the path to cctk.exe
        $cctkPath = "X:\bios\dell\cctk.exe"
        
        # Array of known passwords
        $KnownPasswords = @("password1", "password2", "password3")  # Replace these with your actual passwords
    }

    PROCESS {
        foreach ($pwd in $KnownPasswords) {
            # Command to reset BIOS admin password using cctk.exe
            $command = "$cctkPath --setuppwd=$pwd --valsetuppwd=$pwd"

            # Execute the command and capture the result
            $result = Invoke-Expression $command

            # Check the result (modify this check based on the actual output of cctk.exe when successful)
            if ($result -like "*success*") {
                Write-Output "Password cleared successfully using $pwd."
                return
            } 
        }
        Write-Warning "Failed to clear the password using known passwords."
    }

    END
}

Found some inspiration here:
https://www.powershellgallery.com/packages/DellBIOSProvider/2.7.0/Content/Clear-DellAdminPassword.ps1

I tried the script first without integrating the cctk, and ran it cause in the task sequence without any errors. Same thing with cctk, no compliments and it didn't clear the password.

cctk.exe --syspwd=newpassword --valsyspwd=oldpassword

1 answer

Your answer

Answer 1

Rich Matheisen 47,906

You've installed Dells' DellBIOSProvider module? Which version? Version 2.7.0 is the current version.

You'd use the Clear-DellAdminPassword first, then the Write-DellAdminPassword to set the new password.

https://www.powershellgallery.com/packages/DellBIOSProvider/2.7.0

The documentation for that module:

https://dl.dell.com/content/manual37680244-dell-command-powershell-provider-version-2-7-user-s-guide.pdf?language=en-us

Why write your own function (which mostly looks like Dells' code).

lupinlicious 136

"Why write your own function (which mostly looks like Dells' code)."
Answer: Sometimes, bios password tends to change, but I keep track of different passwords. Therefore, I'd like to build an array to test different types of passwords until the script finds a match.

This will take place when the computer needs to be reinstalled.
Instead of doing manual work, I'd like to automate this process.

# Import the module
Import-Module "Z:\Scripts\Dell-CheckBIOS\DellBIOSProvider\2.7.0\DellBIOSProvider.psm1"


Function Clear-DellAdminPassword {
<#
  .Synopsis
    Erases the Admin (Setup) BIOS password.
  .Description
    This CmdLet clears the Admin password in BIOS. If the provided password is incorrect, it will attempt using other passwords from the array.
  .Example
    Clear-DellAdminPassword -Password <existing password>
#>

param(  
    [Parameter(Mandatory=$true)][string] $Password
 )

 # Array of possible passwords
 $possiblePasswords = @(
     'password1',
     'password2',
     'password3'
    
 )

 BEGIN { }

 PROCESS {
     $passwordCleared = $false
     foreach ($possiblePass in $possiblePasswords) {
         try {
             Set-Item DellSmbios:\Security\AdminPassword -value "" -password $possiblePass
             Write-Output "Password cleared using: $possiblePass"
             $passwordCleared = $true
             break
         }
         catch {
             # Catch the error and continue to the next password
         }
     }

     if (-not $passwordCleared) {
         Write-Warning "Unable to clear the password using provided passwords"
     }
 }

 END {}

}

If the script clears the bios password, I can let another task sequence set the password using cctk.exe

cctk.exe --syspwd=newpassword --valsyspwd=""

This should set the new bios password, since the old one has been cleared
--valsyspwd="" or --valsyspwd=

in MDT I run this task sequence: powershell.exe -executionpolicy bypass -windowstyle hidden -file "%SCRIPTROOT%\Dell-CheckBIOS\ClearBIOS.ps1"

It does not complain or result in an error during the run, but the BIOS password is not cleared.

I'd love some guidance on how to type the script.

Thaaanks

Share via

How to clear known BIOS password (Dell)

1 answer

Your answer