This feature allows Org Admins, IT Admins and MSP Admins to centrally manage Windows BIOS, drivers and firmware updates on any Lenovo Windows device. Updates are checked when new devices are claimed and licensed, and on-demand from the System Update page by clicking on the Check for updates link.
Available updates can be deployed remotely at any time on one or more devices and on groups of devices. End users can accept or deny updates requiring reboot based on the deferral configuration set on LDM.
This feature requires either a Pro or a Premium license and a special add-in service on the device to check for updates from the Lenovo repository. Most Lenovo devices are automatically preloaded with this service but if it was removed or your custom preload does not include it, LDM can automatically install it during provisioning. To enable automatic validation for the service, go to Policy Management/Organization Settings/Features/System Update Preferences
Troubleshooting
To enable System Update to seamlessly push BIOS updates to devices without requiring a Supervisor Password, the following BIOS settings are required on the device. These settings are pre-configured by default in the correct state for remote updates. However, if these values have not been manually modified on the target device, they will need to be adjusted back to the following:
MODEL BIOS SETTING
ThinkPad Flash BIOS Updating by End-Users = Enable
ThinkCentre Require SVP when Flashing = No
ThinkStation Require Admin. Pass. when Flashing = No
Using System Update
Navigate to App Management > System Update.
Check for Updates button
Clicking this link triggers a scan for all Pro and Premium licensed devices in the organization. Once initiated, each device begins scanning and sends any newly found updates to LDM. This process takes a few minutes.
If the option Automatically Scan only for New Updates under Policy Management > LDM Organization Settings > Feature is enabled, the Check for updates link will be disabled for 30 minutes immediately after the last automatic scan is initiated.
Available Updates Tab
This tab displays a list of all available system updates, which can be filtered by Severity, Update Type, or Reboot Status.
Click the down arrow to expand the system update accordion and view the list of devices that have received or still require it, along with relevant device information.
The Eye icon displays detailed information about the system update. For Critical and Recommended updates, a ReadMe file is available for download, providing further details.
To Deploy or Schedule an Update
To deploy a system update, you may choose to deploy it immediately or schedule it for a later time. In either case, follow these steps:
- Select a system update.
- Select a device.
- Click Update.
- A pop-up window appears with the options Deploy Now and Schedule Deployment. Select one of the options and follow the steps as explained below:
- Deploy Now
- Select this option to deploy the update immediately.
- Click Next. An information window appears showing information about the devices chosen for the update. You can review details such as the devices' current status and network status information.
- Click Submit. This operation will take some minutes.
- Schedule Deployment
- Select a specific date and time for deploying the update.
This feature uses the same time range validation as App deployment. If multiple devices in different time zones are selected, the system ensures that the scheduled deployment time is set in the future for all devices. - Click Next.
An information window appears showing information about the selected devices, including the selected deployment time. - Click Submit.
Enables the scheduling of all available updates for all devices at once. If no filter is applied, the operation will include the complete list of updates. However, applying a filter narrows the scope to updates that meet the selected criteria. For example, filtering by Severity and selecting "Critical" ensures that only Critical updates are included in the operation, and additional filters can further refine the list.
This feature only supports the use of filters through the Available Updates tab.
To Deploy or Schedule All Available Updates
- Click the Schedule All Available Updates button.
- A pop-up window appears, offering two options: Deploy Now and Schedule Deployment.
- Choose an option and follow the steps below:
- Deploy Now
- Select this option to deploy the updates immediately.
- Click Next.
- A notification window will appear, displaying a list of updates affected by the operation.
- Detailed information for each update is presented as it appears on the System Update page.
- Expanding the accordions reveals the list of devices to which each update will be applied.
- Click Submit. This operation will take some minutes.
- Schedule Deployment
- Select a specific Date and Time for deploying the update.
- Note: If devices are in different time zones, ensure the selected date and time is in the future for all devices. For example, if you have a device in India and another in Brazil, the India time zone is ahead of Brazil by several hours. To accommodate this, you must select a date and time that is several hours ahead of Brazil's local time, as this will be the earliest allowable time for deployment across all devices.
- However, to prevent users from being blocked by a long-running operation, a minimum limit of 24 hours ahead has been set to ensure compatibility across all time zones
- Click Next.
- An information window appears showing the selected date and time, and information about the updates programmed to be deployed.
- Click Submit.
The Schedule All Available Updates will remain disabled for 5 minutes to avoid overlapping operations.
Updates by Devices or Groups Tab
This tab provides two different views:
Devices
Displays all available system updates for each device. To deploy a system update:
- Expand the device accordion to view all packages available for that specific device.
- Select the checkboxes next to the system updates you want to deploy.
- Click Update. Repeat this process for other devices, if applicable.
- A pop-up window will appear with the options Deploy Now and Schedule Deployment.
- Choose one of these options and follow the instructions in sections i or ii.
The information window now includes details specific to each package: Package Name, Update Type, Severity, and Reboot Type. All columns are sortable.
Device Groups
Displays all available system updates for each device group. To deploy a system update:
- Select a device group to view all available system updates for that group.
- Expand the system update accordion to view the list of devices associated with that update in the selected group.
- Select the checkboxes next to the devices you want to update.
- Click Update to begin the installation.
- A pop-up window will appear with the options Deploy Now and Schedule Deployment.
- Choose one of these options and follow the instructions in sections i or ii.
If the Status of a system update displays
Reboot Required, it indicates that the device has deferred the reboot the maximum number of times allowed (for more information, refer to
Using Policy Management. In this case, the checkboxes for all updates will be disabled.
Notes
- Only devices within a group that require the update will be listed.
- If a device is not shown in the list, be sure it is assigned a Pro or a Premium license.
Scheduled Updates Tab
This page displays all created schedules, which can be filtered, deleted, and edited.
Filtering updates
Updates can be filtered by:
- Severity
- Update Type
- Reboot Status
Deleting a Schedule
To permanently remove a specific schedule:
- Select the checkbox next to the schedule you want to delete.
- Click Delete.
- Click Confirm Delete.
A confirmation message will appear, and the page will reload.
Editing Schedules
To edit a scheduled system update:
- Select the checkbox next to the system update(s) you want to edit.
- Click Edit.
- A pop-up window will appear, where you can modify the schedule for the selected update(s). If the update includes multiple devices in different time zones, the new schedule will follow the same rules as those applied when creating a new schedule: the system ensures that the deployment time is scheduled in the future for all devices.
- Click Edit.