From d701fb4a403a5c90c1995165150679fecef53eb2 Mon Sep 17 00:00:00 2001 From: Xavier Petit <32063953+xpetit@users.noreply.github.com> Date: Wed, 4 Sep 2019 13:49:33 +0100 Subject: [PATCH] Add BIOS configuration doc --- docs/bios-configuration.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 docs/bios-configuration.md diff --git a/docs/bios-configuration.md b/docs/bios-configuration.md new file mode 100644 index 000000000..21fdfab47 --- /dev/null +++ b/docs/bios-configuration.md @@ -0,0 +1,29 @@ +# BIOS Configuration + +## Steps + +F10 (Open Setup) + +- _Security_ + - _Create BIOS Administrator Password_ → Set password +- _Advanced_ + - _Boot Options_ + - _USB Storage Boot_ → Disabled + - _Fast Boot_ → Disabled (disturbs network boot) + - _Audio Alerts During Boot_ → Disabled (very noisy) + - _HP Sure Recover_ + - _HP Sure Recover_ → Disabled (tries to restore Windows) + - _Secure Boot Configuration_ + - _Configure Legacy Support and Secure Boot_ → «Legacy Support Disable and Secure Boot Disable» (**TODO**: use Secure Boot) + +F10 → Yes (Save changes & Reboot) + +> Enter the code that the BIOS asks to disable the secure boot + +## Automation + +- Can be automated using Intel vPro/AMT (**TODO**) +- Can be partially automated with a USB programmable keyboard such as : + - [USB Rubber Ducky](https://shop.hak5.org/products/usb-rubber-ducky-deluxe) + - [XK-24 USB Programmable Keypad for Windows or Mac](https://www.amazon.com/gp/product/B003MB780E) + - [Cactus WHID: WiFi HID Injector USB Rubberducky](https://www.tindie.com/products/aprbrother/cactus-whid-wifi-hid-injector-usb-rubberducky/)