BIOS Analytics

The BIOS Analytics tab provides visibility into BIOS-related settings across managed devices. It enables administrators to view BIOS configuration values reported by devices, compare settings across the device fleet, and export BIOS information for auditing and analysis.

Accessing BIOS Analytics

To access BIOS Analytics:

1. Navigate to Security > BIOS Management.
2. Click the BIOS Analytics tab.

Viewing BIOS Information

The BIOS Analytics page displays BIOS-related configuration data collected from managed devices.

Administrators can review information such as:

• Device Name
• Device Serial Number
• Device Model
• Device Architecture
• Device Hostname
• BIOS configuration settings and their current values

Depending on the OEM and device capabilities, additional BIOS attributes may be displayed in separate columns.

Available Controls:

• Select OEM - Filter BIOS analytics by OEM.
• Search - Quickly find devices using device information.
• Export - Download BIOS analytics data in .csv format.

Use Cases

BIOS Analytics can be used to:

• Verify BIOS settings across managed devices.
• Identify devices with non-compliant BIOS configurations.
• Compare BIOS configurations across device models and OEMs.
• Generate reports using the Export option for operational and security audits.
• Review BIOS capabilities supported by different devices.

Validated Device Models

The following device models have been validated by 42Gears for BIOS Management functionality.

Lenovo

• ThinkPad E580
• ThinkPad E15
• ThinkPad L14
• ThinkPad E490
• ThinkPad E14 Gen 6
• ThinkPad E14
• ThinkBook 14 G8 IRL

note

• The above models have been tested and validated for BIOS Management. While BIOS Management may function on other Lenovo models, available BIOS settings and behavior may vary depending on the device model, BIOS version, and firmware capabilities.
• Based on our testing, Lenovo ThinkPad E580, ThinkPad E15, and ThinkBook G8 devices, if a Master HDD Password is already configured, it cannot be cleared remotely through SureMDM. The Master HDD Password must first be removed locally on the device before it can be managed through SureMDM.

Important Considerations Before Deploying BIOS Configurations

Before deploying BIOS configurations to production devices, review the following considerations:

• Deploying the same BIOS configuration to identical device models does not guarantee identical results or behavior. BIOS options and behavior can vary between different device models, hardware generations, and firmware versions. Therefore, do not assume that a configuration validated on one model will function identically on another.
• BIOS configuration changes can affect device startup behavior, security settings, and overall device operability.
• Certain BIOS settings may require a device reboot before the changes take effect.
• Changes related to Lock boot order, preferred boot order, or password management should be validated in a test environment before production deployment.
• BIOS passwords configured through SureMDM should be securely communicated to authorized end users when required. Failure to do so may prevent users from accessing or starting their devices.
• Removing a BIOS configuration may not automatically revert all BIOS settings to their previous values. The resulting behavior depends on the configured Action on Config Removal setting.
• Selecting Reset to Factory Settings during configuration removal may restore BIOS settings to factory defaults. On BitLocker-protected devices, this may trigger BitLocker recovery and require the recovery key.
• Device support for BIOS settings may vary based on OEM, model, BIOS version, and firmware capabilities. Unsupported settings may be skipped or reported as failed during deployment.
• Administrators should validate BIOS configurations on a limited set of devices before assigning them to larger device groups.
• Unsupported devices and unsupported agent versions will not receive BIOS configurations.