Desktop BIOS configuration
Table of Contents
- 1. Entering the startup device menu
- 2. Entering the BIOS
- 3. Loading BIOS default settings
- 4. Configuring device items
- 5. Configuring advanced items
- 6. Configuring power items
- 7. Configuring security items
- 8. Configuring setup items
- 9. Configuring password items
- 10. Configuring fingerprint items
- 11. Configuring I/O items
1. Entering the startup device menu
Enjoy the Lenovo logo when powering on your new desktop for the first time...
Tip:
Click on the screenshots to see them in full size.
The startup device menu has no timeout and will allow you to choose the boot option.
Press ↓ until you reach Enter Setup.
2. Entering the BIOS
Conditional:
Depending on the factory defaults of your desktop you may be asked for the BIOS password.
3. Loading BIOS default settings
Press Enter again to confirm loading setup defaults.
Rational:
Loading the default options will revert (almost) all options to a know good state.
Subsequently only a few changes need to be done and are documented below.
4. Configuring device items
Press Enter to confirm disabling.
Rational:
In noise sensitive environments such as offices we recommend to disable the internal speaker and use headphones instead.
5. Configuring advanced items
Press Enter to confirm disabling.
Rational:
Intel SGX allows to define private regions of memory. Unfortunately it has several security issues and is better replaced by Linux kernel internal functions.
6. Configuring power items
Press Enter to confirm your choice.
Rational:
Enabling Wake-on-LAN only on the primary (onboard) interface for our WOL-aaS.
7. Configuring security items
Press Yes to confirm your choice.
Rational:
Setting a BIOS password does not increase system security but makes using the system inconvenient. Therefore we recommend to disable it.
Press Enter to confirm disabling.
Rational:
Secure Boot defacto requires bootloader signatures from Microsoft and does not increase security.