From d701fb4a403a5c90c1995165150679fecef53eb2 Mon Sep 17 00:00:00 2001
From: Xavier Petit <32063953+xpetit@users.noreply.github.com>
Date: Wed, 4 Sep 2019 13:49:33 +0100
Subject: [PATCH] Add BIOS configuration doc

---
 docs/bios-configuration.md | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 docs/bios-configuration.md

diff --git a/docs/bios-configuration.md b/docs/bios-configuration.md
new file mode 100644
index 000000000..21fdfab47
--- /dev/null
+++ b/docs/bios-configuration.md
@@ -0,0 +1,29 @@
+# BIOS Configuration
+
+## Steps
+
+<kbd>F10</kbd> (Open Setup)
+
+-   _Security_
+    -   _Create BIOS Administrator Password_ → Set password
+-   _Advanced_
+    -   _Boot Options_
+        -   _USB Storage Boot_ → Disabled
+        -   _Fast Boot_ → Disabled (disturbs network boot)
+        -   _Audio Alerts During Boot_ → Disabled (very noisy)
+    -   _HP Sure Recover_
+        -   _HP Sure Recover_ → Disabled (tries to restore Windows)
+    -   _Secure Boot Configuration_
+        -   _Configure Legacy Support and Secure Boot_ → «Legacy Support Disable and Secure Boot Disable» (**TODO**: use Secure Boot)
+
+<kbd>F10</kbd> → Yes (Save changes & Reboot)
+
+> Enter the code that the BIOS asks to disable the secure boot
+
+## Automation
+
+-   Can be automated using Intel vPro/AMT (**TODO**)
+-   Can be partially automated with a USB programmable keyboard such as :
+    -   [USB Rubber Ducky](https://shop.hak5.org/products/usb-rubber-ducky-deluxe)
+    -   [XK-24 USB Programmable Keypad for Windows or Mac](https://www.amazon.com/gp/product/B003MB780E)
+    -   [Cactus WHID: WiFi HID Injector USB Rubberducky](https://www.tindie.com/products/aprbrother/cactus-whid-wifi-hid-injector-usb-rubberducky/)