This feature allows Org Admins, IT Admins and MSP Admins to centrally manage Windows BIOS, drivers and firmware updates on any Lenovo Windows device. Updates are checked when new devices are claimed and licensed, and on-demand from the System Update page by clicking on the Check for updates link.
Available updates can be deployed remotely at any time on one or more devices and on groups of devices. End users can accept or deny updates requiring reboot based on the deferral configuration set on LDM.
This feature requires either a Pro or a Premium license and a special add-in service on the device to check for updates from the Lenovo repository. Most Lenovo devices are automatically preloaded with this service but if it was removed or your custom preload does not include it, LDM can automatically install it during provisioning. To enable automatic validation for the service, go to Policy Management/Organization Settings/Features/System Update Preferences
Troubleshooting
To enable System Update to seamlessly push BIOS updates to devices without requiring a Supervisor Password, the following BIOS settings are required on the device. These settings are pre-configured by default in the correct state for remote updates. However, if these values have not been manually modified on the target device, they will need to be adjusted back to the following:
MODEL BIOS SETTING
ThinkPad Flash BIOS Updating by End-Users = Enable
ThinkCentre Require SVP when Flashing = No
ThinkStation Require Admin. Pass. when Flashing = No
Using System Update
Navigate to App Management > System Update.
Check for Updates
Clicking this link triggers a scan for all Pro and Premium licensed devices in the organization. Once initiated, each device begins scanning and sends any newly found updates to LDM. This process takes a few minutes.
If the option Automatically Scan only for New Updates under Policy Management > LDM Organization Settings > Feature is enabled, the Check for updates link will be disabled for 30 minutes immediately after the last automatic scan is initiated.
Available Updates Tab
This tab displays a list of all available system updates, which can be filtered by Severity, Update Type, or Reboot Status.
Click the down arrow to expand the system update accordion and view the list of devices that have received or still require it, along with relevant device information.
The Eye icon displays detailed information about the system update. For Critical and Recommended updates, a ReadMe file is available for download, providing further details.
To deploy a system update, you may choose to deploy it immediately or schedule it for a later time. In either case, follow these steps:
- Select a system update.
- Select a device.
- Click Update.
- A pop-up window appears with the options Deploy Now and Schedule Deployment. Select one of the options and follow the steps as explained below:
- Deploy Now
- Select this option to deploy the update immediately.
- Click Next. An information window appears showing information about the devices chosen for the update. You can review details such as the devices' current status and network status information.
- Click Submit.
- Schedule Deployment
- Select a specific date and time for deploying the update.
This feature uses the same time range validation as App deployment. If multiple devices in different time zones are selected, the system ensures that the scheduled deployment time is set in the future for all devices. - Click Next.
An information window appears showing information about the selected devices, including the selected deployment time. - Click Submit.
Updates by Devices or Groups Tab
This tab provides two different views:
Devices
Displays all available system updates for each device. To deploy a system update:
- Expand the device accordion to view all packages available for that specific device.
- Select the checkboxes next to the system updates you want to deploy.
- Click Update. Repeat this process for other devices, if applicable.
- A pop-up window will appear with the options Deploy Now and Schedule Deployment.
- Choose one of these options and follow the instructions in sections i or ii.
The information window now includes details specific to each package: Package Name, Update Type, Severity, and Reboot Type. All columns are sortable.
Device Groups
Displays all available system updates for each device group. To deploy a system update:
- Select a device group to view all available system updates for that group.
- Expand the system update accordion to view the list of devices associated with that update in the selected group.
- Select the checkboxes next to the devices you want to update.
- Click Update to begin the installation.
- A pop-up window will appear with the options Deploy Now and Schedule Deployment.
- Choose one of these options and follow the instructions in sections i or ii.
If the Status of a system update displays
Reboot Required, it indicates that the device has deferred the reboot the maximum number of times allowed (for more information, refer to
Using Policy Management. In this case, the checkboxes for all updates will be disabled.
Notes
- Only devices within a group that require the update will be listed.
- If a device is not shown in the list, be sure it is assigned a Pro or a Premium license.
Scheduled Updates Tab
This page displays all created schedules, which can be filtered, deleted, and edited.
Filtering updates
Updates can be filtered by:
- Severity
- Update Type
- Reboot Status
Deleting a Schedule
To permanently remove a specific schedule:
- Select the checkbox next to the schedule you want to delete.
- Click Delete.
- Click Confirm Delete.
A confirmation message will appear, and the page will reload.
Editing Schedules
To edit a scheduled system update:
- Select the checkbox next to the system update(s) you want to edit.
- Click Edit.
- A pop-up window will appear, where you can modify the schedule for the selected update(s). If the update includes multiple devices in different time zones, the new schedule will follow the same rules as those applied when creating a new schedule: the system ensures that the deployment time is scheduled in the future for all devices.
- Click Edit.