TMP enable package/Steps for MS surface Pro 7 during OSD

Question

Hello All,

Need your help to enable bit locker for model Surface pro 7 during OSD, also failed installed driver using TS variable “SELECT * FROM Win32_ComputerSystem WHERE Model LIKE “%Surface%”” / SELECT * FROM Win32_ComputerSystem WHERE Model Like “%Surface pro%”/ SELECT * FROM Win32_ComputerSystem WHERE Model = “Surface pro 7”. I have user the command to get model “wmic csproduct get name”.

 

Thanks

Amit

solved 0
Amit laha 2020-09-02T11:25:36+05:30 9 Answers 561 views Beginner
0

Answers ( 9 )

  2. Amit laha
    0
    2020-09-08T07:04:03+05:30
    Reply

    After changing the command line driver installation success.
    To Enable bit locker (Testing purpose ) we have enable “Computer Configuration\Administrative Templates\Windows Components\Bitlocker Drive Encryption\Operating System Drives\ Enable use of Bitlocker authentication requiring preboot keyboard input on slates” and enable it from control panel. It’s worked.

    So we have to change the GPO to manage surface Pro device.

  4. Jitesh Kumar
    1
    2020-09-04T16:10:40+05:30
    Reply

    Make sure you have downloaded the drivers based on Build Version which you have! For Ex- 18362

    Use the command msiexec /a “FilePath” /qb TARGETDIR=”OutputPath” to extract the drivers and check whether Firmware which showing missing is available or not!

    Note :- Change FilePath & Outputpath

    Add screenshots or generate logs for installation that will help you to identify

    Best answer
  6. Amit laha
    0
    2020-09-04T11:29:00+05:30
    Reply

    Missing UEFI ! Indicating Firmware with exclamation mark inside device manager ?
    Yes
    Tried to execute this msi manually & check whether all drivers has successfully installed or not.
    Manually also not installing UEFI drivers.

    Default Bitlocker step in place but yes i have to tried manually command. Will check it and reply back.

  8. Jitesh Kumar
    1
    2020-09-03T06:13:08+05:30
    Reply

    Please raise query separably if you have multiple questions! That will help others to identify easily.

    • Amit laha
      0
      2020-09-03T09:58:53+05:30
      Reply

      Thanks for the guide. I have checked both the variable and query result returned with computer name. So i will try it again.

      Regarding Bit-locker existing TS having HP BIOS Configuration Utility to set BIOS configuration and Change to UEFI. So HP models are bit-locker completed successfully. But Surface pro we don’t have any utility to do the same kind of configuration.

      • Jitesh Kumar
        1
        2020-09-03T10:19:21+05:30
        Reply

        I believe mostly all Surface Pro devices directly comes with UEFI & a compatible TPM, If you’re applying Bitlocker through Task Sequence steps! You can directly add and check.

        If you having any issue please update!

        • Amit laha
          0
          2020-09-03T14:03:37+05:30
          Reply

          WMI variable is working now with single cote ( ‘). also successfully installed the drivers but missing UEFI. From below link i have download the driver MSI file create SCCM package for installation.
          https://www.microsoft.com/en-us/download/details.aspx?id=100419
          still bit-locker is non-encrypted.
          Do i need to follow any alternate way to achieve this ?

          • Jitesh Kumar
            1
            2020-09-04T08:46:13+05:30

            Missing UEFI ! Indicating Firmware with exclamation mark inside device manager ?
            Tried to execute this msi manually & check whether all drivers has successfully installed or not.

            Are you thinking by installing drivers, devices will get bitlocked >> NO ! For Bitlocker you need to enable steps inside Task Sequence or add command line if you’re executing through Task Sequence.

            Try to manually run the command in your device and record your observation only for testing purpose!

  10. Jitesh Kumar
    0
    2020-09-03T06:10:06+05:30
    Reply

    Hello Amit, What you getting as model name ?

    First try to validate the WMI query by opening WBEMTest from Surface Pro 7 devices.

    -Go to Start and type “WBEMTEST” into the search or run box.
    -Click on Query and type your query with model name to validate.

    For Example – https://snipboard.io/SLQHO1.jpg

    Once you able to successfully validate, use the same query to identify driver models and update the result.

    + What challenges you have to enable Bitlocker ?

Leave an answer

Sorry, you do not have permission to answer to this question .