Best Practices for Dell Firmware Updates via Intune with BitLocker-Enabled Devices
Question
Hi All,
I wanted to check the recommended way to update firmware on Dell devices.
We primarily use Dell systems, and firmware updates are currently installed via Intune as part of the driver update process.
However, we’re facing an issue where Intune does not automatically suspend BitLocker before driver or firmware updates begin. As a result, the update process hangs indefinitely, and devices get stuck on the “Installing updates” screen after reboot. The only way to recover is to forcefully power off the machine and turn it back on — at which point the user is prompted for the BitLocker recovery key.
One workaround would be to deploy firmware updates using the application model and include a script to suspend BitLocker before installation. However, that approach would require manual intervention each time a new firmware version is released.
Currently, our Intune policy is configured to auto-approve all recommended drivers 7 days after release.
Could you please suggest the best practice or recommended method for handling firmware updates in this scenario?
Posted by Akhilesh Sharma in FB Group
Read more – Learn How to Deploy BitLocker using Intune
Answers ( 4 )
or an interior with several existing finishes, it helps to compare sill plates in daylight as well as with the lights on. A bright product photo does not tell the whole visual story. From LED Door Sills, our illuminated Mercedes entry sills are here: https://leddoorsills.com/collections/mercedes-door-sills. Look at the surrounding trim, the plate surface, and the lettering together. A simple layout can be worth considering if you want the sill to complement the cabin rather than dominate it.
Managing Dell firmware updates through Intune on BitLocker-enabled devices requires careful timing to avoid recovery key prompts. I follow a simple process: pause BitLocker protection, run the update, then resume protection within a short window. This structured approach reminds me of how I plan my academic writing just like when I need expert guidance from https://www.thesiswriter.ca to keep my thesis chapters organized and error-free.
Hi Anoop/Mitchell Scott,
As a recommended best practice, use Dell Command | Update with Intune + BitLocker Suspension Script (Most Reliable)
It provides control over update timing and ensures BitLocker suspension happens safely.
Approach:-
1) Use the Dell Command | Update (DCU) CLI tool.
2) Create an Intune Win32 app that:
* Suspends BitLocker (Manage-bde -Protectors -Disable C:).
* Executes the DCU command line to install BIOS/firmware updates.
* Re-enables BitLocker after reboot.
A Sample PowerShell Script:-
# Suspend BitLocker
manage-bde -protectors -disable C: -RebootCount 1
# Run BIOS update silently via Dell Command Update
Start-Process “C:Program Files (x86)DellCommandUpdatedcu-cli.exe” -ArgumentList “/applyUpdates -reboot=enable” -Wait
# Optional: Log output
Start-Sleep -Seconds 30
Deployment Steps:-
1) Package this as a Win32 app in Intune.
2) Schedule monthly or quarterly deployments.
3) You can target it using Dynamic Groups (e.g., all Dell devices).
Replied by Mitchell Scott in FB Group
As others have said, DCU and deploy with a config file. I can’t remember the exact name but there is an executable you run that’s inside the DCU install folder which executes the config file during the install. With this you can set auto updates, schedule, no notifications, etc.