So, this has been asked before and I've used a Google search trying to get a answer. But I guess I'm just to dumb to understand...

We are about to replace all our laptops with new X1 Carbon Gen10 models.

During the Task Sequence I'll like to set the Bios Supervisor password (non is set out the box)

How to I do that?

As I understand, I have to press 12 for pxe boot, then press "Del" to enter SDB mode and then I manually have to type a wmi command?
Really, it's more than 500 laptops being replaced. There must be another way?

I've also read about this HTA tool which create a .ini file, so I can skip the wmi part?
What then, I still need to press "Del" to enter SDB mode and then run my Task Sequence and call the HTA tool

I'm so confused? Is there some dummy guide I can follow?

As far as I know there is no way to automatically set this, if there is no initial BIOS PW active.

The way we do it: We set an easy dummy password, that everyone can know. Then during the task sequence we change this dummy password to the actual one. Or... you could order devices with a pre-configured BIOS PW from Lenovo. :)

We set the supervisor password when we image our laptops out of the box using SCCM.  No user interaction is required. 

Use the ThinkBiosConfig tool from Lenovo to set the supervisor password in an ini file, while creating the password you will also have to set an authorization key (I believe the key can only be alphanumeric). 

Create a package with no program in SCCM  containing the ThinkBiosConfig tool and the ini file.   

After the OS has been applied we run a command line calling the package we created, followed by a restart step.  

Command line is: cmd.exe /c ThinkBiosConfig.hta "file=The Name of Your Ini file" "key=The Name of the Key you Set when creating the Bios password"

You will have to put the laptop in System Deployment Boot Mode before running the Task Sequence for the above to work.  F12 to enter boot menu and then the delete button.