# BIOS and Driver Updates **Last Updated On**: 14 Jul 2026 **7 minutes read** ## Overview As new hardware components are released, BIOS patches are necessary to ensure that the system can fully support them. This is particularly important for newer CPUs, RAM, and storage devices, where BIOS updates may be required for optimal performance or new features. Some BIOS updates optimize the system's performance by refining hardware initialization, improving power management, or enabling better control over system resources. Drivers are a critical part of a computer system. As operating systems and software evolve, outdated drivers may no longer be compatible with newer software or operating system versions. Patching drivers ensures continued compatibility, enhancing system functionality and stability. Driver patches introduce new features, optimizations, or better integration with modern hardware, such as supporting newer graphics technologies or offering new functionality for devices. Hence, it is crucial that you update your system BIOS and drivers regularly. Using Endpoint Central, you can deploy BIOS and Driver Updates via an [automated task](https://www.manageengine.com/products/desktop-central/help/patch-management/apd.html) or [manually](https://www.manageengine.com/products/desktop-central/help/patch-management/manual-deployment.html). Some BIOS are password protected; you can patch them too using Endpoint Central. ## Pre-Requisites If you want the BIOS updates and Driver Updates to be managed by Endpoint Central, go to **Threats & Patches → Settings → Patch Database Settings.** Under **Select the patches that you wish to manage**, ensure that **Driver** and **BIOS** are selected under **Windows**, and then click on **Save**. ![Patch Database Sync](https://www.manageengine.com/products/desktop-central/help/images/dbbiosdriver.png) ## Supported BIOS and Drivers Below is the list of supported devices for Driver and BIOS updates. **Note:** BIOS and Driver updates are currently supported in Endpoint Central from build version **10.0.423**. Only the below mentioned BIOS and Drivers are supported. ..... ## Patching of Password-Protected BIOS Configuring password protection for the BIOS in the systems of the network is often the first step of defense in preventing unauthorized access to the system. In addition, this also forbids malicious/unauthorized users from making changes to the system's hardware and software configurations. However, this added security layer can prove to be a hassle, especially when it comes to deploying BIOS updates across the endpoints in your organization's network. Since these updates require authentication via credentials before installation, this would mean relying on the end-users to input the credentials for a successful installation, thus leading to either productivity breaks or a lesser chance of successful installations. The Password-protected BIOS Patching functionality lets you deploy updates for the protected BIOS, without having to rely on the end-user for password authentication. To support BIOS patching with password protection on Dell machines, it's essential to have the [Dell PowerShell module](https://www.dell.com/support/kbdoc/en-in/000146531/installing-the-dell-smbios-powershell-provider-in-windows-pe) installed on each endpoint. - Navigate to **Threats & Patches > Supported Patches** and search for the **Patch ID - 111808** and click **Install/Publish Patches**. ![password-protected-bios-patching](https://www.manageengine.com/patch-management/images/password-protected-bios-patching-1.png) By leveraging this functionality, you can store the pre-configured BIOS passwords of the end-user systems on the product server. This ensures that the BIOS updates are deployed and the passwords are automatically fetched and installed from the server storage, for a seamless installation. **Note:** Refer to [this page](https://www.manageengine.com/products/desktop-central/help/patch-management/attention-required.html#BIOS) to learn how to identify if the BIOS on Dell machines is password-protected. While this feature is enabled by default in the server, you are required to add and map the credentials before deploying the patches for a successful installation. Here are the steps: ### Adding and mapping BIOS credentials 1. On the product console, navigate to **Admin > BIOS Credential Settings** (under **Patch Settings**) 2. Click on **Add BIOS Credential** 3. Enter the **Credential Name**, **Description** (optional) and the **Password**. 4. You can map the credentials to any of the following: - **All Computers**: Maps the BIOS credentials to all of the computers in the network. - **Vendor(s)**: Maps the credentials to specific vendor(s) (Such as Dell and HP). - **Custom Group(s)**: Maps the credentials to one or more Custom Groups as required. 5. Once done, click on **Save** to add and map the credentials to the required systems. ![Add BIOS Credentials](https://www.manageengine.com/patch-management/images/add-bios-credentials.png) ### Deploying BIOS updates Once the credentials have been mapped, the BIOS updates can be deployed to the systems [manually](https://www.manageengine.com/products/desktop-central/help/patch-management/manual-deployment.html). ## Review the BIOS-Mapping Status of the Systems You can review and monitor the BIOS-mapping status of all the systems in the network from a single dashboard. To know more about how to review the status of these systems on the console, refer to [this page](https://www.manageengine.com/products/desktop-central/help/patch-management/attention-required.html#BIOS).