How to configure the BIOS on DELL laptops

From medicin.ncmm.IT
Revision as of 17:38, 24 June 2020 by Georgmar@uio.no (talk | contribs) (Created page with "How the BIOS should be set in order to install the UiO Fedora: Settings: Security -> TPM 2.0 Security -> Check "TPM ON" Check "PPI Bypass For Enable Commands" Check "PPI Byp...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

How the BIOS should be set in order to install the UiO Fedora:

Settings:

Security -> TPM 2.0 Security -> Check "TPM ON" Check "PPI Bypass For Enable Commands" Check "PPI Bypass for Disable Commands" Check "PPI Bypass for Clear command" Check "Attestation Enable" Check "Key Storage Enable" Check "SHA-256"

Select "Enabled"

Hit apply. Reboot.

Get back into the BIOS again:

Settings:

Virtualization Support -> Trusted Execution -> Check "Trusted Execution"

Secure Boot -> Secure Boot Enable -> Tick "Secure boot enable" Secure Boot -> Secure Boot Mode -> Audit

General -> Advanced Boot Options -> Check "Enable UEFI Network stack" General -> UEFI Boot Path Security -> Always Except Internal HHD&PXE

System Configuration -> Thunderbolt Adapter configuration -> Check "Thunderbolt" System Configuration -> Thunderbolt Adapter configuration -> Check "Enable Thunderbolt (and PCIe behind TBT ) Pre-boot Modules" System Configuration -> Thunderbolt Adapter configuration -> Check "Enable Thunderbolt Boot Support

System Configuration -> Thunderbolt Adapter configuration -> Select "No Security"

System Configuration -> Thunderbolt Auto Switch -> Select "Native Enumeration"

System Configuration -> USB Powershare -> Check "Enable USB PowerShare"

System Configuration -> Mac Address Pass-Through -> Select "Disabled"


Reason: The pre-boot environment by UIO is geared towards TPM, so we need to enable AND ignore the commands at the same time.

But because the USB adapter here is also a thunderbolt adapter, we need to enable thunderbolt boot and make sure that the laptop will prevent the adapter from going to sleep