Enable and Handle TPM with CM 2002

Question

Hello,

We would like to enable TPM of machines with the help of ConfigMrg 2002 for Bitlocker implementation

Please let me know how can I achieve that.........

• via script
• SCCM Task Sequence

Or any other way........

Karan

Answer 1

@Kunal Mehra I have used the Dell CCTK (Client Configuration Toolkit) before. Newer versions are now called Dell Command | Configure, and Dell has a handy reference guide to the command line utility here:

https://topics-cdn.dell.com/pdf/command-configure-v41_reference-guide_en-us.pdf

Page 95 has the TPM options.

In effect, you can use the command line CCTK from within Command | Configure - and first thing you'd want to do is to check what options are available. You can run:
CCTK -O C:\temp\settings.ini
to output those settings to a text file. This will give you a list of the settings which can be set, including TPM.

The TPM settings which you can use for the model you ran the CCTK -O command will then be visible, so you know what options to use, but note with Dell that you must have a BIOS password enabled in order to activate the TPM chip, or if you are clearing the TPM. You could disable that password afterwards should you wish to do so.

The command line utility and any supporting DLL files ideally should be copied down to the local machine to run the commands you need - and use run command line steps within the task sequence to do each cctk command (also useful for debugging later on)

If all the Dell kit you have has the same TPM options throughout, then the CCTK commands could be run as a task sequence group, with the group having a WMI query as a dependency:

SELECT * FROM Win32_ComputerSystem WHERE Manufacturer LIKE "%Dell%"

The reason for the wildcard is some are listed in their manufacturer string as Dell, others as Dell Inc., so this should get them all.

So if you were to add another manufacturer's TPM enabling steps later on, you could do so easily.