# Configuring UEFI settings

## INTEL CPU's

<mark style="color:red;">`Do not even think about skipping any of them, they are 100% crucial.`</mark>&#x20;

{% tabs %}
{% tab title="ASUS" %}

1. Virtualization: \
   \- Advanced -> CPU Configuration -> `Intel (VMX) Virtualization Technology` set to `Disabled`.
2. VT-d: \
   \- Advanced -> System Agent (SA) Configuration -> `VT-d` set to `Disabled`.
3. TPM: \
   \- Advanced -> PCH-FW -> `TPM Device Solution` set to `Enable Discrete Firmware/TPM`. \
   \- Advanced -> Trusted Computing -> `Security Device Support` set to `Disabled`.
4. Armoury Crate: \
   \- Tool -> ASUS Armoury Crate -> `Download & Install ARMOURY CRATE app` set to `Disabled`.
5. Fast Boot: \
   \- Boot -> `Boot Configuration` -> Fast Boot set to `Disabled`.
6. Secure Boot: \
   \- Boot -> Secure Boot -> `OS Type` set to `Other OS`.
   {% endtab %}

{% tab title="MSI" %}

1. Virtualization: \
   \- OC -> CPU Features -> `Intel Virtualization Tech` set to `Disabled`.
2. VT-d: \
   \- OC -> CPU Features -> `Intel VT-D Tech` set to `Disabled`.
3. TPM: \
   \- Settings -> Security -> Trusted Computing -> `TPM Device Selection` set to `dTPM`. \
   \- Settings -> Security -> Trusted Computing -> `Security Device Support` set to `Disabled`.
4. MSI Driver Utility Installer: \
   \- Settings -> Advanced -> `MSI Driver Utility Installer` set to `Disabled`.
5. Fast Boot: \
   \- Settings -> Boot -> `Fast Boot` set to `Disabled`.
6. Secure Boot: \
   \- Settings -> Security -> Secure Boot -> `Secure Boot` set to `Disabled`.
   {% endtab %}

{% tab title="Gigabyte" %}

1. Virtualization:\
   &#x20;\- Tweaker -> Advanced CPU Configuration -> `Intel (VMX Virtualization Technology` set to `Disabled`.
2. VT-d: \
   \- Settings -> Miscellaneous -> `VT-d` set to `Disabled`.
3. TPM: \
   \- Settings -> Miscellaneous -> `Intel Platform Trust Technology (PTT)` set to `Disabled`.\
   &#x20;\- Settings -> Miscellaneous -> Trusted Computing -> `Security Device Support` set to `Disabled`.
4. Gigabyte Utilities Downloader Configuration:\
   &#x20;\- Settings -> IO Ports -> Gigabyte Utilities Downloader Configuration -> `Download & Install app` set to `Disabled`.
5. Fast Boot:\
   &#x20;\- Boot -> `Fast Boot` set to `Disabled`.
6. Secure Boot:\
   &#x20;\- Boot -> Secure Boot -> `Secure Boot Enable` set to `Disabled`.
   {% endtab %}

{% tab title="Other" %}

### UEFI/BIOS SETTINGS THAT NEED TO BE DISABLED:

1. Virtualization
2. VT-D
3. TPM
4. Utility Installer
5. Fast Boot.
6. Secure Boot
   {% endtab %}
   {% endtabs %}

## AMD CPU's

<mark style="color:red;">`Do not even think about skipping any of them, they are 100% crucial.`</mark>

{% tabs %}
{% tab title="ASUS" %}

1. Virtualization:\
   &#x20;\- Advanced -> CPU Configuration -> `SVM Mode` set to `Disabled`.
2. AMD NX Mode:\
   &#x20;\- Advanced -> CPU Configuration -> `NX Mode` set to `Disabled`.
3. AMD IOMMU: \
   \- Advanced -> AMD CBS -> `IOMMU` set to `Disabled`.
4. TPM: \
   \- Advanced -> AMD fTPM -> `TPM Device Solution` set to `Enable Discrete Firmware/TPM`. \
   \- Advanced -> Trusted Computing -> `Security Device Support` set to `Disabled`.
5. Armoury Crate: \
   \- Tool -> ASUS Armoury Crate -> `Download & Install ARMOURY CRATE app` set to `Disabled`.
6. Fast Boot: \
   \- Boot -> `Boot Configuration` -> Fast Boot set to `Disabled`.
7. Secure Boot:\
   &#x20;\- Boot -> Secure Boot -> `OS Type` set to `Other OS`.
   {% endtab %}

{% tab title="MSI" %}

1. Virtualization: \
   \- OC -> Advanced CPU Configuration -> `SVM Mode` set to `Disabled`.
2. NX Mode: \
   \- OC -> Advanced CPU Configuration -> `NX Mode` set to `Disabled`.
3. IOMMU: \
   \- OC -> Advanced CPU Configuration -> AMD CBS -> `IOMMU` set to `Disabled`.
4. TPM:\
   &#x20;\- Settings -> Security -> Trusted Computing -> `AMD fTPM Switch` set to `AMD CPU fTPM Disabled`.\
   &#x20;\- Settings -> Security -> Trusted Computing -> `Security Device Support` set to `Disabled`.
5. MSI Driver Utility Installer: \
   \- Settings -> Advanced -> `MSI Driver Utility Installer` set to `Disabled`.
6. Fast Boot: \
   \- Settings -> Boot -> `Fast Boot` set to `Disabled`.
7. Secure Boot:\
   &#x20;\- Settings -> Security -> Secure Boot -> `Secure Boot` set to `Disabled`.
   {% endtab %}

{% tab title="Gigabyte" %}

1. Virtualization:\
   &#x20;\- Tweaker -> Advanced CPU Configuration -> `SVM Mode` set to `Disabled`.
2. AMD NX Mode: \
   \- Tweaker -> CPU Configuration -> `NX Mode` set to `Disabled`.|||||||
3. AMD IOMMU: -\
   &#x20;Settings -> Miscellaneous -> `IOMMU` set to `Disabled`.
4. TPM: \
   \- Settings -> Miscellaneous -> `Trusted Platform Module` set to `Disabled`. \
   \- Settings -> Miscellaneous -> Trusted Computing -> `Security Device Support` set to `Disabled`.
5. Gigabyte Utilities Downloader Configuration: \
   \- Settings -> IO Ports -> Gigabyte Utilities Downloader Configuration -> `Gigabyte Utilities Downloader` set to `Disabled`.
6. Fast Boot:\
   &#x20;\- Boot -> `Fast Boot` set to `Disabled`.
7. Secure Boot: \
   \- Boot -> Secure Boot -> `Secure Boot Enable` set to `Disabled`.
   {% endtab %}

{% tab title="Other Motherboards" %}

### UEFI/BIOS SETTINGS THAT NEED TO BE DISABLED:

1. SVM Mode
2. IOMMU
3. TPM
4. Utility Installer
5. Fast Boot.
6. Secure Boot
   {% endtab %}
   {% endtabs %}

## TURN OFF WIFI & BLUETOOTH <mark style="color:red;">\[REQUIRED]</mark>

> **ASUS:** ADVANCED > ONBOARD DEVICES CONFIGS > WIFI (WLAN) & BLUETOOTH **\[DISABLED]**

> **MSI:** ADVANCED > INTEGRATED PERIPHERALS > WIFI (WLAN) & BLUETOOTH **\[DISABLED]**

> **GIGABYTE:** ADVANCED/PERIPHERALS > WIFI (WLAN) & BLUETOOTH **\[DISABLED]**

> **ASROCK:** ADVANCED > CHIPSET CONFIGURATION > WIFI (WLAN) & BLUETOOTH **\[DISABLED]**

## <mark style="color:green;">Save your changes and exit BIOS</mark> ( F10 "Save and Exit").

[<br>](https://awoofer-guide.gitbook.io/aqua-spoofer/bios-+-windows-setup-part-1/step-1-flashing-your-bios)