BIOS Configuration, Scaled Across Your Entire Fleet

• • Dell Command | Secure BIOS Configuration is a new cloud-based solution that enables IT administrators to configure and enforce BIOS settings across a fleet of Dell commercial PCs through Microsoft Intune, without requiring physical access to devices or on-premises infrastructure.
  • The solution is available through the Microsoft Azure Marketplace and integrates natively with Intune, making it accessible to organizations already using Microsoft’s device management ecosystem.
  • Built specifically for Dell commercial hardware, the solution provides reliable, firmware-level BIOS enforcement with security controls that reduce fleet-wide exposure to endpoint vulnerabilities.

BIOS configuration, scaled across your entire fleet

Managing BIOS settings across a fleet of PCs has long been one of those operational challenges that doesn’t get enough attention, until something goes wrong. Inconsistent configurations, manual processes and the complexity of managing settings across distributed devices create real risk. For IT administrators responsible for maintaining secure, compliant environments, that risk is hard to ignore. Dell Command | Secure BIOS Configuration, cloud-hosted, addresses this directly, giving IT teams a modern, scalable way to manage BIOS settings across their entire PC fleet with confidence.

Why BIOS settings management matters now

Security threats don’t wait at the application layer. Firmware-level vulnerabilities are increasingly targeted because they sit below the operating system and are harder to detect. Yet many organizations still rely on manual or inconsistent methods to configure and manage BIOS settings, creating gaps that bad actors can exploit.

IT administrators need solutions that enforce consistent BIOS configurations at scale, without requiring deep firmware expertise or time-intensive manual processes. Dell Command | Secure BIOS Configuration is built for exactly that challenge.

What the solution delivers

Dell Command | Secure BIOS Configuration is a managed, cloud-hosted service that gives IT administrators centralized control over BIOS settings across a fleet of Dell PCs. It’s designed to be deployed without requiring on-premises infrastructure or VPN connectivity, making it accessible across distributed environments.

The solution uses a certificate-based authentication model, where BIOS configuration payloads are signed using cryptographic keys and bound to specific devices. This means that only authorized, verified configurations can be applied to a given device, reducing the risk of unauthorized firmware changes.

The architecture is built on Microsoft Azure, with Dell managing the service on your behalf. Devices communicate with the cloud service to receive and authenticate configuration payloads, making the deployment model straightforward to integrate into existing IT environments.

Prerequisites include Dell commercial PCs with supported BIOS versions, an active Microsoft Intune environment and Azure Active Directory. The solution integrates directly with Intune for policy deployment, meaning administrators can use familiar workflows and tooling they already rely on.

What IT administrators can expect from the solution

 Security and control

The service runs in a private Azure tenant, providing stronger isolation and control than shared infrastructure alternatives. Signing keys are protected by Azure Managed HSM, and BIOS sessions are encrypted and authenticated, reinforcing trust at every step of the configuration process.

Integration and automation

The solution works with Microsoft Intune and Azure Active Directory for centralized authentication and policy deployment workflows. Deployment is agentless, meaning there’s no additional software to install on managed devices. Configuration payloads are device-bound, which helps simplify operations and reduces the attack surface.

 Scale and sync

Because the solution is cloud-hosted, it removes the dependency on internal network access or VPN connectivity, making it viable for geographically distributed fleets. As a managed service, it scales with your fleet and receives automatic updates, reducing the operational overhead that typically comes with maintaining on-premises infrastructure.

The Dell difference

Many vendors offer pieces of this capability. Dell brings them together in a way that no other provider currently offers. Dell Command | Secure BIOS Configuration combines:

• • Device-bound payloads
  • Challenge-response authorization — with BIOS-generated random values — to help protect against replayed configuration commands
  • Azure-managed HSM signing
  • Encrypted BIOS sessions
  • Agentless deployment
  • Intune-native workflows

into a single, integrated solution.

Each of these capabilities contributes to a more secure, more manageable BIOS configuration process. Together, they represent a meaningful step forward for organizations that take firmware security seriously and need a solution that keeps pace with the scale and complexity of modern IT environments.

No other competitor currently offers this specific combination of capabilities in a cloud-hosted, certificate-based BIOS management solution.

Get started

Dell Command | Secure BIOS Configuration gives IT administrators the controls, architecture and integrations needed to manage BIOS settings at scale, without added complexity or risk.

To learn more about prerequisites, deployment steps, architecture details and integration guidance, visit the  Knowledge Base article.

Ready to use the solution? Access it on the Microsoft Marketplace.