diff --git a/docs/bios-configuration.md b/docs/bios-configuration.md
new file mode 100644
index 000000000..21fdfab47
--- /dev/null
+++ b/docs/bios-configuration.md
@@ -0,0 +1,29 @@
+# BIOS Configuration
+
+## Steps
+
+<kbd>F10</kbd> (Open Setup)
+
+-   _Security_
+    -   _Create BIOS Administrator Password_ → Set password
+-   _Advanced_
+    -   _Boot Options_
+        -   _USB Storage Boot_ → Disabled
+        -   _Fast Boot_ → Disabled (disturbs network boot)
+        -   _Audio Alerts During Boot_ → Disabled (very noisy)
+    -   _HP Sure Recover_
+        -   _HP Sure Recover_ → Disabled (tries to restore Windows)
+    -   _Secure Boot Configuration_
+        -   _Configure Legacy Support and Secure Boot_ → «Legacy Support Disable and Secure Boot Disable» (**TODO**: use Secure Boot)
+
+<kbd>F10</kbd> → Yes (Save changes & Reboot)
+
+> Enter the code that the BIOS asks to disable the secure boot
+
+## Automation
+
+-   Can be automated using Intel vPro/AMT (**TODO**)
+-   Can be partially automated with a USB programmable keyboard such as :
+    -   [USB Rubber Ducky](https://shop.hak5.org/products/usb-rubber-ducky-deluxe)
+    -   [XK-24 USB Programmable Keypad for Windows or Mac](https://www.amazon.com/gp/product/B003MB780E)
+    -   [Cactus WHID: WiFi HID Injector USB Rubberducky](https://www.tindie.com/products/aprbrother/cactus-whid-wifi-hid-injector-usb-rubberducky/)