First, let me start by saying there is already a good blog post which outlines how to use HP’s BIOSConfigUtility in an MDT task sequence (which can be easily translated into an SCCM task sequence).
I recently implemented this tool for a client to enable the TPM feature in BIOS in preparation for BitLocker. The utility was being run from a task sequence with command line such as:
cmd.exe /c c:\temp\BIOSConfigUtility.exe /SetConfig:TPMEnable.REPSET /NewAdminPassword:"P@55word!"
In my testing, the BIOS password was being set properly, but the TPM enable would not get enabled. BIOSConfigUtility.exe would terminate with error code 10, which essentially meant it was trying to enable TPM but the provided password is incorrect. What I found to fix the problem was to instead specify the full path to TPMEnable.REPSET file. So instead, the switch would instead be:
/SetConfig:c:\temp\TPMEnable.REPSET
t3chn1ck 
I bios config set with BAT file whitch contains:
BiosConfigUtility.EXE /nspwd:BIOS_password
BiosConfigUtility.EXE /setConfig:Bioss_settings_file.txt /cspwd:BIOS_password
Some hints –
1.If bios is without password you can`t change settings.
2.Some manufaturers bioses skip some characters in passwords – check manually, Lenovo skips “_”
3.Bios config I manually create and after than get with command BiosConfigUtility.EXE /getConfig:Bioss_settings_file.txt /cspwd:BIOS_password – then use this file in task sequence.
My English, unfortunately, is not very efficient so there are things that I did not understand well. For me too, ends with error 10, but I did not understand what should I do. You can explain it to me clearly? Thanks in advance
Show your code which gives you error code 10
I followed this guide first: http://www.ajagwe.com/how-to-set-or-reset-bios-administrator-password-in-hp-notebook/ , so I used this command: biosconfigutility.exe /newsetuppassword:”password”
Thank you for everything
Help me please
error: 10
Valid password not provided. BCU was unable to find a valid password on the command line in
the following cases:
● When attempting to change the password, the correct
password was not provided.
● When attempting to change the password, the new password
did not satisfy password requirements for the platform.
● When attempting to change setting values, the correct
password was not provided.
Newer versions of BCU don’t allow setting the password in plain text on the command line, you need to encode it into a binary file using another HP tool.
Thanks for the update, appreciate it.
I can tell you an even worse issue… ever since HP changed BCU, it now has issues with decrypting the password “.bin” file if the profile of the user on the computer is a roaming vs mandatory profile.