# BIOS Configuration

## Steps

<kbd>F10</kbd> (Open Setup)

- _Security_
  - _Create BIOS Administrator Password_ → Set password
- _Advanced_
  - _Boot Options_
    - _USB Storage Boot_ → Disabled
    - _Fast Boot_ → Disabled (disturbs network boot)
    - _Audio Alerts During Boot_ → Disabled (very noisy)
  - _HP Sure Recover_
    - _HP Sure Recover_ → Disabled (tries to restore Windows)
  - _Secure Boot Configuration_
    - _Configure Legacy Support and Secure Boot_ → «Legacy Support Disable and Secure Boot Disable» (**TODO**: use Secure Boot)

<kbd>F10</kbd> → Yes (Save changes & Reboot)

> Enter the code that the BIOS asks to disable the secure boot

## Automation

- Can be automated using Intel vPro/AMT (**TODO**)
- Can be partially automated with a USB programmable keyboard such as :
  - [USB Rubber Ducky](https://shop.hak5.org/products/usb-rubber-ducky-deluxe)
  - [XK-24 USB Programmable Keypad for Windows or Mac](https://www.amazon.com/gp/product/B003MB780E)
  - [Cactus WHID: WiFi HID Injector USB Rubberducky](https://www.tindie.com/products/aprbrother/cactus-whid-wifi-hid-injector-usb-rubberducky/)