Try It

Warranty Reporting for Intune

shape_not_found
shape_not_found

For quite some time we have had warranty reporting for Dell, Lenovo, and GETAC devices. We used to also support Microsoft devices but, unfortunately, both Microsoft and HP have taken their warranty API’s offline. We have chosen not to bring this functionality into Intune as we expect that Microsoft will add it natively to Intune soon. However, some customers need the data now, so we are providing this solution as a work-around until we see what the native Intune warranty information looks like once it is released. 

We aren’t going to pretend this is a complete, robust solution but it will give you the warranty end date in a report. Hopefully this is helpful while we wait for Microsoft to bring us a better solution. 

Note: The script has code in it to collect warranty data for Microsoft devices however Microsoft has taken their API offline. 

Prerequisites: 
  1. Dell requires an API token in order to access their warranty API. You must apply for the token at https://techdirect.dell.com/Portal/APIs.aspx 
  2. Lenovo requires a client token in order to access their warranty API. Getting the token from Lenovo can be a bit more difficult than getting a token from Dell. You will need to have your Lenovo account rep request a key on your behalf.
PowerShell
############ Enable Warranty Vendors ###############
$DellWarranty = $true
$LenovoWarranty = $false
$MicrosoftWarranty = $false
$GetacWarranty = $false

##### Warranty Vendor API Keys
$DellClientID = "XXXXXXXX"
$DellClientSecret = "XXXXXXXXX"
$LenovoClientID = ""


 
######### functions ##########
function Get-DellWarranty([Parameter(Mandatory = $true)]$SourceDevice, $client) {
    $AuthURI = "https://apigtwb2c.us.dell.com/auth/oauth/v2/token"
    if ($Global:TokenAge -lt (get-date).AddMinutes(-55)) { $global:Token = $null }
    If ($null -eq $global:Token) {
        $OAuth = "$DellClientID`:$DellClientSecret"
        $Bytes = [System.Text.Encoding]::ASCII.GetBytes($OAuth)
        $EncodedOAuth = [Convert]::ToBase64String($Bytes)
        $headersAuth = @{ "authorization" = "Basic $EncodedOAuth" }
        $Authbody = 'grant_type=client_credentials'
        $AuthResult = Invoke-RESTMethod -Method Post -Uri $AuthURI -Body $AuthBody -Headers $HeadersAuth
        $global:token = $AuthResult.access_token
        $Global:TokenAge = (get-date)
    }
 
    $headersReq = @{ "Authorization" = "Bearer $global:Token" }
    $ReqBody = @{ servicetags = $SourceDevice }
    $WarReq = Invoke-RestMethod -Uri "https://apigtwb2c.us.dell.com/PROD/sbil/eapi/v5/asset-entitlements" -Headers $headersReq -Body $ReqBody -Method Get -ContentType "application/json"
    if ($warreq.entitlements.serviceleveldescription) {
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Dell'
            'Product'               = $warreq.productLineDescription
            'SerialNumber'          = $SourceDevice
            'Warranty'              = $warreq.entitlements.serviceleveldescription -join "`n"
            'StartDate'             = (($warreq.entitlements.startdate | sort-object -Descending | select-object -last 1) -split 'T')[0]
            'EndDate'               = (($warreq.entitlements.enddate | sort-object | select-object -last 1) -split 'T')[0]
            'Client'                = $Client
        }
    }
    else {
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Dell'
            'Product'               = $null
            'SerialNumber'          = $SourceDevice
            'Warranty'              = 'Could not get warranty information'
            'StartDate'             = $null
            'EndDate'               = $null
            'Client'                = $Client
        }
    }
    return $WarObj
}
function Get-LenovoWarranty([Parameter(Mandatory = $true)]$SourceDevice, $client) {
    $headersReq = @{ "ClientID" = $LenovoClientID }
    $WarReq = Invoke-RestMethod -Uri "http://supportapi.lenovo.com/V2.5/Warranty?Serial=$SourceDevice" -Headers $headersReq -Method Get -ContentType "application/json"
    
    try{
        $Warlist = $WarReq.Warranty | Where-Object {($_.ID -eq "36Y") -or ($_.ID -eq "3EZ") -or ($_.ID -eq "12B") -or ($_.ID -eq "1EZ")}
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Lenovo'
            'Product'               = $WarReq.Product
            'SerialNumber'          = $SourceDevice
            'Warranty'              = $Warlist.Name -join "`n"
            'StartDate'             = (($Warlist.Start | sort-object -Descending | select-object -last 1) -split 'T')[0]
            'EndDate'               = (($Warlist.End | sort-object | select-object -last 1) -split 'T')[0]
            'Client'                = $Client
        }

    }catch{
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Lenovo'
            'Product'               = $null
            'SerialNumber'          = $SourceDevice
            'Warranty'              = 'Could not get warranty information'
            'StartDate'             = $null
            'EndDate'               = $null
            'Client'                = $Client
        }
    }
    return $WarObj  
}
function Get-MSWarranty([Parameter(Mandatory = $true)]$SourceDevice, $client) {
    $body = ConvertTo-Json @{
        sku          = "Surface_"
        SerialNumber = $SourceDevice
        ForceRefresh = $false
    }
    $PublicKey = Invoke-RestMethod -Uri 'https://surfacewarrantyservice.azurewebsites.net/api/key' -Method Get
    $AesCSP = New-Object System.Security.Cryptography.AesCryptoServiceProvider 
    $AesCSP.GenerateIV()
    $AesCSP.GenerateKey()
    $AESIVString = [System.Convert]::ToBase64String($AesCSP.IV)
    $AESKeyString = [System.Convert]::ToBase64String($AesCSP.Key)
    $AesKeyPair = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes("$AESIVString,$AESKeyString"))
    $bodybytes = [System.Text.Encoding]::UTF8.GetBytes($body)
    $bodyenc = [System.Convert]::ToBase64String($AesCSP.CreateEncryptor().TransformFinalBlock($bodybytes, 0, $bodybytes.Length))
    $RSA = New-Object System.Security.Cryptography.RSACryptoServiceProvider
    $RSA.ImportCspBlob([System.Convert]::FromBase64String($PublicKey))
    $EncKey = [System.Convert]::ToBase64String($rsa.Encrypt([System.Text.Encoding]::UTF8.GetBytes($AesKeyPair), $false))
      
    $FullBody = @{
        Data = $bodyenc
        Key  = $EncKey
    } | ConvertTo-Json
      
    $WarReq = Invoke-RestMethod -uri "https://surfacewarrantyservice.azurewebsites.net/api/v2/warranty" -Method POST -body $FullBody -ContentType "application/json"
    if ($WarReq.warranties) {
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Microsoft'
            'Product'               = $WarReq.device.title
            'SerialNumber'          = $SourceDevice
            'Warranty'              = $WarReq.warranties.name -join "`n"
            'StartDate'             = (($WarReq.warranties.effectivestartdate | sort-object -Descending | select-object -last 1) -split 'T')[0]
            'EndDate'               = (($WarReq.warranties.effectiveenddate | sort-object | select-object -last 1) -split 'T')[0]
            'Client'                = $Client
        }
    }
    else {
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Microsoft'
            'Product'               = $null
            'SerialNumber'          = $SourceDevice
            'Warranty'              = 'Could not get warranty information'
            'StartDate'             = $null
            'EndDate'               = $null
            'Client'                = $Client
        }
    }
    return $WarObj
}
function Get-GetacWarranty([Parameter(Mandatory = $true)]$SourceDevice, $client) {
    $WarReq = Invoke-RestMethod -Uri https://api.getac.us/rma-manager/rma/verify-serial?serial=$SerialNumber -Method Get -ContentType "application/json"
    try{
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Getac'
            'Product'               = $WarReq.model
            'SerialNumber'          = $SourceDevice
            'Warranty'              = $WarReq.warrantyType
            'StartDate'             = $null
            'EndDate'               = (($warreq.endDeviceWarranty | sort-object | select-object -last 1) -split 'T')[0]
            'Client'                = $Client
        }
    }catch{
        $WarObj = [PSCustomObject]@{
            'Provider'              = 'Getac'
            'Product'               = $null
            'SerialNumber'          = $SourceDevice
            'Warranty'              = 'Could not get warranty information'
            'StartDate'             = $null
            'EndDate'               = $null
            'Client'                = $Client
        }
    }
    return $WarObj
}

##############################
########### Main ############# 
##############################
$Bios = Get-WmiObject Win32_Bios
$Make = $Bios.Manufacturer
$SerialNumber = $Bios.SerialNumber

If ($DellWarranty -and $Make -eq "Dell Inc."){
    write-host "Dell computer found" -ForegroundColor Green
    $WarObj = Get-DellWarranty -SourceDevice $SerialNumber -Client $env:COMPUTERNAME
} 
ElseIf($LenovoWarranty -and $Make -eq "LENOVO") {
    write-host "LENOVO computer found" -ForegroundColor Green         
    $WarObj = Get-LenovoWarranty -SourceDevice $SerialNumber -Client $env:COMPUTERNAME         
} 
ElseIf ($MicrosoftWarranty -and $Make -eq "Microsoft Corporation") {
    write-host "Microsoft computer found" -ForegroundColor Green
    $WarObj = Get-MSWarranty -SourceDevice $SerialNumber -Client $env:COMPUTERNAME             
}
ElseIf ($GetacWarranty -and $Make -eq "INSYDE Corp.") {
    write-host "Getac computer found" -ForegroundColor Green
    $WarObj = Get-GetacWarranty -SourceDevice $SerialNumber -Client $env:COMPUTERNAME
}
Else{
    write-host "$Make warranty not supported" -ForegroundColor Red
    $WarObj = $null
}

$WarObj
$EndDate = $WarObj.EndDate


  
if ($WarObj){
    # Set Vars for WMI Info
    Write-Host $EndDate
    Exit 0
    
    }
else {
Write-Host 'Not Found'
Exit 1
}

Edit the Script

  1. Copy the PowerShell script from above into your favorite code editor.
  2. Enable or disable each of the manufacturer's warranty collection in the Enable Warranty Vendors section by entering either $true or $false. 
  3. If applicable enter the Dell Client ID and Client Secret values. When you retrieve this info from TechDirect it will be in a format similar to xxxxxxxxxx (yyyyyyyyy). The part before the opening parenthesis is the Client ID, the part inside the parenthesis is the Client Secret. (Note: Do not enter the parenthesis themselves in the script)
  4. If applicable enter the Lenovo Client ID provided to you by your Lenovo account rep.
  5. Ensure the saved script is encoded in UTF-8.
  6. Save the edited script.

Create a Remediation Script

  1. Using Remediation scripts in Intune is a great way to run any scripts on a schedule. However, unless you extend warranties this script only needs to run once on each computer. This document shows how to use a Remediation script but using a Script in Intune is also feasible. 
  2. In the Intune admin center, go to Devices > Remediations.
  3. Choose Create script package button to create a script package.
  4. n the Basics step, give the script package a Name and optionally, a Description. 
  5. Select Next.

Upload the Script

  1. On the Settings step, upload the warranty script as the Detection script.
  2. No Remediation script will be used. 
  3. Select Yes on the Run script in 64-bit PowerShell slider.
  4. Select Next.
  5. Selecting Scope Tags is optional.
  6. Select Next.

Deploy the Script

  1. On the Assignments pane, select the group(s) to which you want to deploy the script package.
  2. Select the Schedule that you would like to run the script. Once is acceptable for most customers.
  3. You can also use filters to limit the script to running only on devices manufactured by the vendor(s) for which you want to collect warranty data.
  4. Select Next.
  5. Select Create.

Take a Break

  1. Wait some time for devices to run the script and return data.
  2. Ensure that a refresh cycle has run in Power BI.

Duplicate the Proactive Remediations Page

  1. Open your BI for Intune report.
  2. Go to Edit mode.
  3. Select the Proactive Remediations page.
  4. Right click the Proactive Remediations tab.
  5. Select Duplicate.

Rename the New Page

  1. Right click the new page tab.
  2. Select Rename.
  3. Enter a name for the new page.

Add Filters to the Warranty Page

  1. On the Filters pane add a page filter for Script Package Name and select your warranty script remediation package.
  2. Add any other filters that you find necessary.

Customize the Warranty Page

  1. You might want to customize the warranty page to make it easier to consume.
  2. The script will output the warranty end date as the "Pre Remediation Script Output". You can see this in the table on the page.
  3. In this example I've removed some of the unnecessary visuals and renamed the "Pre Remediation Script Output" field in the table to "Warranty End Date".
  4. Save your report and return to reading view.