LSUClient

A PowerShell module that partially reimplements the "Lenovo System Update" program for convenient, automatable and worry-free driver and system updates for Lenovo computers.

Install-Module -Name 'LSUClient'

Highlight features

• Does driver, BIOS/UEFI, firmware and utility software updates
• Run locally or manage/report on an entire fleet of computers remotely
• Allows for fully silent and unattended updates
• Supports not only business computers but consumer lines too (e.g. IdeaPad)
• Full Web-Proxy support including authentication
• Fetch updates from Lenovo directly or use an internal repository
• Concise, helpful and easy-to-read output
• Accounts for and works around some bugs and mistakes in the official tool
• Free and open-source!

Examples and tips

See available updates:

Get-LSUpdate

Find and install available updates:

$updates = Get-LSUpdate
$updates | Install-LSUpdate -Verbose

Install only packages that can be installed silently and non-interactively:

$updates = Get-LSUpdate | Where-Object { $_.Installer.Unattended }
$updates | Save-LSUpdate -Verbose
$updates | Install-LSUpdate -Verbose

Filtering out non-unattended packages like this is strongly recommended when using this module in MDT, SCCM, PDQ, remote execution via PowerShell Remoting, ssh or any other situation in which you run these commands remotely or as part of an automated process. Packages with installers that are not unattended may force reboots or attempt to start a GUI setup on the machine and, if successful, halt until someone clicks through the dialogs.

To get all available packages:

$updates = Get-LSUpdate -All

By default, Get-LSUpdate only returns "needed" updates. Needed updates are those that are applicable to the system and not yet installed. If you want to retrieve all available packages instead, use Get-LSUpdate -All. To filter out unneeded packages later, just look at the IsApplicable and IsInstalled properties. The default logic is equivalent to: Get-LSUpdate -All | Where-Object { $_.IsApplicable -and -not $_.IsInstalled }

Download drivers for another computer:

Get-LSUpdate -Model 20LS -All | Save-LSUpdate -Path 'C:\20LS_Drivers' -ShowProgress

Using the -Model parameter of Get-LSUpdate you can retrieve packages for another computer model. In this case you almost always want to use -All too so that the packages found are not filtered against your computer and all packages are downloaded.

---

For more details, available parameters and guidance on how to use them run Get-Help -Detailed on the functions in this module.

Dealing with BIOS/UEFI updates

It is important to know that some Lenovo computers require a reboot to apply BIOS updates while other models require a shutdown - the BIOS will then wake the machine from the power-off state, apply the update and boot into Windows. So as to not interrupt a deployment or someone working, this module will never initiate reboots or shutdowns on its own - however it's easy for you to:

1. Run Install-LSUpdate with the -SaveBIOSUpdateInfoToRegistry switch
2. If any BIOS/UEFI update was successfully installed this switch will write some information to the registry under HKLM\Software\LSUClient\BIOSUpdate, including the String "ActionNeeded" which will contain "REBOOT" or "SHUTDOWN" depending on which is required to apply the update.
3. At any later point during your script, task sequence or deployment package you can check for and read this registry-key and gracefully initiate the power-cycle on your terms. I recommend clearing the registry values under HKLM\Software\LSUClient\BIOSUpdate afterwards so you know the update is no longer pending.

If you want to exclude BIOS/UEFI updates, I recommend excluding them by type and possibly Category or Title as a fallback:

$updates = Get-LSUpdate |
    Where-Object { $_.Type -ne 'BIOS' } |
    Where-Object { $_.Category -notmatch "BIOS|UEFI" } |
    Where-Object { $_.Title -notmatch "BIOS|UEFI" }

NOTE: Not all packages have type information and packages sourced from an internal repository created with "Lenovo Update Retriever" never have Category information. In that scenario it is best to either not include BIOS updates in your repository at all or to filter them by their IDs before installing.

Misc

• Only Windows 10 and Windows 11 are supported
• This module does not clean up downloaded packages and installers at any point. The default download location is $env:TEMP\LSUPackages - you may delete it yourself
• By default this module reaches out to https://download.lenovo.com and must be able to download .xml, .exe and .inf files from that domain for successful operation. Alternatively, a custom package repository can be used for completely internal or offline operation with the -Repository parameter of Get-LSUpdate. A custom repository can be served over HTTP(S) or just be a filesystem path - local or UNC.