Bios Configuration

Disable secure chip
Enable Intel Virtualization and VT-d
Disable secure boot and Fast boot
Disable Intel SGX control
Disable Device Guard
Disable wake on LAN/Thunderbolt
Set boot mode to UEFI only
Disable CSM support