Comprehensive BIOS Configuration Lab

1️⃣ Fix System Date & Time

→ Click "Main" in left menu (should already be selected)
→ You'll see "System Date" and "System Time" settings in the right panel
→ Use ↑↓ arrows to select "System Date", press ENTER
→ Use TAB key to move between Month/Day/Year fields
→ Press + or - to change values
→ Set to: 05/09/2025
→ Press ENTER to confirm
→ Select "System Time", press ENTER
→ Use TAB to move between Hour/Minute/Second
→ Set to: 09:30:00
→ Press ENTER to confirm

2️⃣ Enable Intel Virtualization (VT-x)

→ Click "Advanced" in left menu
→ You'll see several submenu options in right panel
→ Use ↑↓ arrows to select "CPU Configuration", press ENTER
→ This opens a submenu — select "Advanced CPU Settings", press ENTER
→ Find "Intel Virtualization Technology" setting
→ Press ENTER to change from Disabled to Enabled
→ Press ESC twice to go back to Advanced menu

3️⃣ Disable CSM (Compatibility Support Module)

→ Click "Boot" in left menu
→ Look for "CSM (Compatibility Support Module)" setting
→ It's currently set to Enabled
→ Use ↑↓ to select it, press ENTER
→ Change from Enabled to Disabled
→ ⚠️ This is required before you can switch to UEFI mode!

4️⃣ Switch to UEFI Boot Mode

→ Still in "Boot" menu
→ Find "Boot Mode Select" setting
→ It's currently set to Legacy
→ Select it, press ENTER
→ Change from Legacy to UEFI
→ 💡 This option only appears after CSM is disabled

5️⃣ Enable TPM 2.0 (Firmware TPM)

→ Click "Security" in left menu
→ Find "Intel PTT Enable" setting
→ This is the firmware TPM (Platform Trust Technology)
→ Select it, press ENTER
→ Change from Disabled to Enabled
→ ✓ Required for Windows 11 and Secure Boot

6️⃣ Enable XMP 3.0 Memory Profile

→ Click "Advanced" in left menu
→ Select "Memory Configuration" submenu, press ENTER
→ Find "Extreme Memory Profile (XMP)" setting
→ Select it, press ENTER
→ You'll see a list of XMP profiles
→ Select "XMP 3.0 Profile 1" (shows 6000 MHz), press ENTER
→ Press ESC to go back
→ ⚡ This unlocks higher memory speed (6000 MHz)

7️⃣ Set Boot Priority (Windows Boot Manager First)

→ Click "Boot" in left menu
→ Scroll down to see "Boot Priority" section
→ You'll see a numbered list of boot devices
→ Find "Windows Boot Manager" (currently at position 2 or 3)
→ Use ↑↓ to select it
→ Press + key repeatedly to move it up to position 1
→ 💡 Only UEFI devices show after switching to UEFI mode

8️⃣ Set Supervisor Password

→ Click "Security" in left menu
→ Find "Supervisor Password" setting (currently shows "Not Set")
→ Select it, press ENTER
→ A password dialog will appear
→ Type any password (minimum 4 characters)
→ Click OK or press ENTER
→ 🔒 This protects BIOS from unauthorized changes

9️⃣ Enable Secure Boot & Load Default Keys

→ Still in "Security" menu
→ Find "Secure Boot" setting, select it, press ENTER
→ Change from Disabled to Enabled
→ Now find "Secure Boot Key Management" setting
→ Select it, press ENTER
→ A key management dialog appears
→ Click "Load Factory Default Keys" button
→ All 4 keys (PK, KEK, db, dbx) will show as "Installed"
→ Click Cancel to close the dialog
→ ⚠️ Secure Boot requires TPM to be enabled first

🔟 Save Configuration

→ Press F10 key (or click F10 button in right sidebar)
→ A "Save Configuration" dialog will appear
→ Click OK to confirm
→ ✅ Lab complete! BIOS is now Windows 11 ready