Temporarily disabling Bitlocker for Intel update

[simon-ocean]

Hey CheckMates.

We have a fleet of Lenovo laptops that occaisionally has a firmware update for the Intel Management Engine required for installation. Looking at the ReadMe file from the update, it is highly recommended that disk encryption [Bitlocker] is disabled before installing.

We are using Harmony Endpoint to centrally manage Bitlocker on our laptops.

My question is, does anyone know of (or done something similar) a way that we could possibly automate disabiling bitlocker through Harmony, installing the update, then enabling again?
We really dont want to have to try to get users to ensure that they do not install the update when prompted BEFORE we get a chance to install the firmware.

I am looking into a way to control the Lenovo updates, but still dont want to have to do it manually across the fleet.

Any ideas?

Thanks
Simon

[PhoneBoy]

Seems like this could be automated: https://support.checkpoint.com/results/sk/sk161575