1. Recommended

.

🔐 Security • Secure Boot: • ✅ Disabled (simplest, avoids kernel/module issues) • Legacy Support: • ❌ Disabled • TPM: • Optional (enable only if you plan disk encryption + TPM later)

🧭 Boot Options • Boot Mode: • ✅ UEFI Native (without CSM) • Boot Order: • OS Boot Manager (Debian) first • Fast Boot: • Optional (disable while troubleshooting)

⚙️ Advanced → Device Options • Intel Virtualization Technology (VT-x): • ✅ Enabled • VT-d (IOMMU): • ✅ Enabled (even if you don’t use it yet) • Hyper-Threading: • Enabled • Turbo Boost: • Enabled

🔌 Power Management • S5 Maximum Power Savings: • ❌ Disabled • Wake on LAN: • Optional (enable if this will be a server) • PCIe ASPM: • Enabled (better power efficiency)

💾 Storage • SATA Mode: • ✅ AHCI • NVMe RAID / Intel RST: • ❌ Disabled

🖥 Graphics • Primary Video Adapter: • Intel Graphics • DVMT Pre-Allocated: • Auto (or 128 MB if adjustable)

👉 Save & Exit

2. Make sure BIOS is the latest versiont¹

Option A – Check current BIOS version

sudo dmidecode -s bios-version sudo dmidecode -s bios-release-date