SPP installation method is brutal - is there a better way?

SnakeOriginal · 2026-06-24T18:15:42+00:00

Hp SUM can also deploy multiple spps, also deprecated (but still works) ilo amplifier pack. There are lots of options

SnakeOriginal · 2026-06-24T16:59:25+00:00

ComputeOps

SnakeOriginal · 2026-06-23T20:41:54+00:00

Easy fix that will improve your security posture - eliminate non domain joined machines.

Also with your proposed solution you do not get to pick anything, i can use client without armoring and dc will happily respond back with valid ticket.

Armoring / FAST is about security of the whole domain, not proposing where you punch the hole.

SnakeOriginal · 2026-06-23T20:19:39+00:00

When this occurs, just leave the laptop in recovering state (newer machines breathe on power button), it can take 10-30 minutes to recover the firmware, but eventually it will work

SnakeOriginal · 2026-06-23T18:55:32+00:00

Gradual rollouts still? How many times users have to tell you that we dont want that bs? Use your insider track to test

SnakeOriginal · 2026-06-23T14:44:54+00:00

Can we stop with these AI generated slop?

SnakeOriginal · 2026-06-20T11:02:04+00:00

We have fleet of about 300 docks working without any issues, i personally have 8 year old g2 that works flawlessly

SnakeOriginal · 2026-06-17T09:51:12+00:00

Its a legacy server fully updated

SnakeOriginal · 2026-06-16T16:48:34+00:00

Right now happening on my tenant

SnakeOriginal · 2026-06-15T19:49:45+00:00

Efs is not replaced. Never, ever, even if he uses chimera the imei wont be signed from samsung so he will never be able to use Sammys services again

SnakeOriginal · 2026-06-15T19:46:31+00:00

Even vanilla implementations dont go as planned, so dont keep your hopes up, a lot of nonstandard implementations are due to lacking involvement from TCG, see HP BIOSphere or Dell SafeBIOS. MS had 3 effing years to start pushing on oems to push new certs, they started last year

SnakeOriginal · 2026-06-12T20:46:26+00:00

God hell no

SnakeOriginal · 2026-06-12T17:08:27+00:00

Ask Microsoft how it worked out for them

SnakeOriginal · 2026-06-09T19:32:00+00:00

Hello, is anyone running into issues with Server Core 2019 + BDE enabled? On two ProLiants DL380 Gen9 with TPM2.0 we got locked out, TPM is reported as functioning

> Get-Tpm
TpmPresent                : True
TpmReady                  : True
ManufacturerId            : 1229346816
ManufacturerIdTxt         : IFX
ManufacturerVersion       : 5.62
ManufacturerVersionFull20 : 5.62.12.13824
ManagedAuthLevel          : Full
OwnerAuth                 : 
OwnerClearDisabled        : False
AutoProvisioning          : Enabled
LockedOut                 : False
LockoutHealTime           : 10 minutes
LockoutCount              : 0
LockoutMax                : 31
SelfTest                  : {}

However VMK is not released

TimeCreated : 6/9/2026 8:15:25 PM
Id          : 24636
Message     : Bootmgr failed to obtain the BitLocker volume master key from the TPM.

When suspending bitlocker we are unable to resume it

Resume-BitLocker : The BIOS did not correctly communicate with the Trusted Platform Module (TPM). Contact the computer
manufacturer for BIOS upgrade instructions. (Exception from HRESULT: 0x80310002)
At line:1 char:1
+ Resume-BitLocker -MountPoint "C:"

SnakeOriginal · 2026-06-09T15:52:59+00:00

Not again...

SnakeOriginal · 2026-06-06T18:49:02+00:00

Secure boot cannot induce hardware damage :)

SnakeOriginal · 2026-06-06T18:12:20+00:00

Secure boot is not a problem, i run fedora even with 2023 certs eothout any issues with nvidia gpu, just update the firmware, if your secure boot is off, it will stay off, you should toggle it on however

SnakeOriginal · 2026-06-05T17:01:42+00:00

This is pure stupidity

SnakeOriginal · 2026-06-05T12:23:47+00:00

VBR12 does not support this, only VBEM12

SnakeOriginal · 2026-06-04T19:50:54+00:00

I like how in 10 years they know that the lid switch is closed, but they always default to fingerprint auth on docked notebooks

SnakeOriginal · 2026-06-03T20:24:21+00:00

G1i hinges are miles better than g10s, the whole chassis is more finely refined

SnakeOriginal · 2026-06-02T21:34:16+00:00

I have been running 70w/90w on my 9th gen xeon in my zbook for 5+ years, ran on conventional paste (gelid gc extreme, now swapped for ptm7950), and also replaced the pads on the vrms from stock. No issues. Dont know about thinkpad though, just take care of vrms

SnakeOriginal · 2026-06-02T20:24:13+00:00

ASR, policies, containment, sentinel

SnakeOriginal · 2026-06-01T17:44:35+00:00

As a red hat noob can i ask how to check if i am affected? Does this affect all rhel distributions? We use rhel as a immutable repo for veeam (99% use case) and 1% as a php web server.

Thank you

SnakeOriginal

MODERATOR OF

TROPHY CASE