Creating BIOS Configuration

To create a new BIOS configuration:

1. Navigate to Security > BIOS Management > Configuration.
2. Click Add Configuration.
3. Configure the required settings across the available configuration steps.

Step 1: Configuration Details

Provide the following information:

Field	Description
Config Name	A unique name used to identify the BIOS configuration.
Select OEM	Select the OEM for which the configuration is intended. Supported OEMs include Lenovo, HP, and Dell.
Action on Config Removal	Determines the action performed when the BIOS configuration is removed from a device. Select one of the following options: Reset to Factory Settings Retain Existing BIOS Settings

Configuration Removal Actions

Reset to Factory Settings: Removes the deployed BIOS configuration and restores BIOS settings to factory defaults. Devices protected by BitLocker may require recovery key authentication after BIOS settings are reset. Supported only on Lenovo and HP.

Retain Existing BIOS Settings: Removes the SureMDM configuration assignment while preserving the BIOS settings currently applied on the device.

After entering the required details, click Next.

Configuring BIOS Settings

The BIOS Settings page allows administrators to define BIOS-level controls that will be enforced on assigned devices.

Password Configuration

Use this section to manage BIOS supervisor passwords.

Available options include:

• Current BIOS Supervisor Password: Specify the existing BIOS supervisor password, where required by the OEM or device (required because Lenovo devices do not support setting a BIOS password remotely for the first time).
• Set / Change BIOS Supervisor Password: Enable this option to configure or change the BIOS Supervisor Password.
• Password Length: Specify the required password length when setting or changing the password.
• New Password: Enter the new BIOS Supervisor Password.
• Confirm Password: Enter the new BIOS Supervisor Password.

Password management helps prevent unauthorized access to BIOS settings on managed devices.

note

The fields displayed under password configuration may vary depending on the selected OEM and its BIOS capabilities.

Boot Order Configuration

The Boot Order Configuration section allows administrators to control the device boot sequence.

Available options include:

• Lock Boot Order: Available only for Lenovo devices, this setting prevents users from modifying the configured boot order on the device.

• Preferred and Allowed Boot Order: Define the preferred boot sequence and the boot devices that are permitted on the device

note

Devices will follow the boot sequence exactly as defined by the OEM design. Dell devices do not automatically fall back to the HDD if a network boot server is unreachable, which can cause them to hang indefinitely at startup. To prevent this, SureMDM automatically configures HttpsBootMode to Manual. This ensures seamless fallback to the local OS without requiring manual user intervention.

Sample Script to change HttpsBootMode to Manual on Dell Devices:

  !#suremdm setbios BootMode Manual

:::

Hardware Control

The Hardware Control section allows administrators to control the availability of selected hardware and connectivity features on supported devices.

Field	Description
Allow Bluetooth	Allows or restricts Bluetooth functionality on the device.
Allow Wi-Fi	Allows or restricts Wi-Fi connectivity on the device.
Allow Fingerprint	Allows or restricts the use of fingerprint functionality on the device.
Allow Camera	Allows or restricts camera functionality on the device.
Allow Microphone	Allows or restricts microphone functionality on the device.

Reboot After

• Specify the time, in minutes, after which the device should reboot to apply the BIOS configuration changes.

note

BIOS configuration changes generally require a device restart before they become effective. Configure an appropriate reboot interval to ensure successful policy application.

After configuring the required settings, click Next.

Assign Devices

In the final step:

1. Select the target devices or device groups.
2. Review the configuration.
3. Click Save to create the BIOS configuration and initiate deployment.

Only devices from supported OEMs that meet the required agent version criteria are available for assignment.

note

BIOS settings supported by a configuration can vary across OEMs and device models. Validate the configuration on the intended device models before deploying it to a larger device group.

The configuration is then distributed to the selected devices.

Viewing Configuration Details

To view a configuration:

1. Navigate to Security > BIOS Management > Configuration.
2. Locate the required configuration.
3. Click View Details.

The details window provides information across multiple sections.

Configuration Details

Displays basic information about the BIOS configuration, including:

• Configuration Name
• OEM Name

BIOS Settings

Displays the BIOS settings configured as part of the selected configuration.

Device Details

Displays deployment status information for assigned devices.

Information includes:

• Device Name
• Device Model
• Device Architecture
• Device Group
• OS Version
• Configuration Status
• Assignment Time

Activity

The Activity section provides an audit trail of administrator actions performed on the selected BIOS configuration.

Information includes:

• Action performed
• Performed by
• Date and time of action

Managing BIOS Configurations

The Configuration page provides the following management actions:

Action	Description
Add Configuration	Creates a new BIOS configuration.
View/Modify	Opens an existing configuration for review or editing.
Assign Devices	Assigns or reassigns configurations to devices or groups.
Delete	Removes the selected BIOS configuration.
Search	Filters configurations using keywords.
Refresh	Updates the configuration list.