This avoids the scenario where a BIOS update is attempted using a password switch where that device doesn’t have a password set. Having said all of this, if you don’t set passwords for your BIOS or don’t enable Bit Locker then ignore the last few paragraphs!

The next step you will need to do is to download all the latest BIOS versions from the HP website for your models.

This is what you would most likely be doing for driver packages.

You don’t need to worry about using anything sneaky to query the SMSBIOSVersion against the Win32_BIOS class.

The BSOD or freeze does not seem to happen at any particular time.

When this happens, I cannot do anything but a hard reboot. It has not frozen so far while I made the zip file, uploaded and wrote this note.

I definitely did not want to be in a position where we were manually updating BIOS versions.

Here is a solution to update your BIOS versions using a Configuration Manager task sequence.

This occurs after the PC has rebooted following the Setup Windows and Config Mgr step.

Create a folder for the model of PC relevant to the BIOS update, then set a WMI Query so it will only run against that model.