Linux

If you plan on dual booting, remember to disable fast startup on the windows side, or you won't be able to access the windows partition(s) as read/write in Linux. I have to dual boot for school, (God damn you, Lockdown Browser!) But as soon as I'm done, I'm dropping MS like the hot steaming pile it is.

I turn off secure boot, simply because I don't like it, don't need it, and it isn't really secure. But this is only a preference of mine.

Fedora works perfectly with secure boot and I keep it enabled when I’m using fedora. It’s worth noting, that if you require any software in the form of a kernel module (for instance, openrazer, a Linux tool for controlling razer devices) it won’t function with secure boot enabled because it isn’t registered at boot. You’d have to reboot to bios, turn off Secure Boot, log in and set your configs, then reboot and turn secure boot back on.

Or you could just leave it off.

I think I've been able to use secure boot with fedora. I didn't need to change any of my settings. But I build my PC myself, so there was never any windows specific config. I did dual boot at the start for a bit, but now I just have Linux on it.

Overall I doubt you need to change any BIOS settings. I'd just try to install and if you run into issues figure it out from there.

Nothing, secure boot should work fine, no reason to disable TPM.

Linux will run fine with secure boot you just have to have it set for other OS not Windows specifically, however, it is a pain in the ass and if you have physical control over your machine I see no good reason to enable it, it significantly compliciates things like building your own kernels.

Fedora should play nice with Secure Boot enabled. You also shouldn't need to do anything with the TPM.

Rarely anything. There can be some newer Bios/chip features that are not supported in the kernel yet, and a few older/quirky machines requires setting correct kernel parameters in the boot phase. But overall, you wouldn't normally do it any different from win, and a laptop from 23 should be supported with all newer kernels.

I'm sure there are Bios settings that could be changed dependent on operating system. Perhaps some internal timing works best with this and that ram clock, or whatever, but it would be a hazzle to figure out, and there may not be any gain - other than the fun of exploring oc..

My thinkpad from 2017 has a setting for Windows vs. Linux sleep (i think sleep level 3 being bugged in that CPU generation or something?). Better google your specific model.

I didn't have to change anything including secure boot when I removed windows and installed Fedora on my laptop. Should generally work, but there's a possibility some newer features may not or may have a Windows-only setting and an other OS setting. Update the BIOS to the latest and just try it..

Leave it as is. Some people go tin foil hat about Secure Boot being insecure, but that's like saying "don't lock the bottom lock on your door because someone can use a lockpock in 2 seconds".

Fedora works fine and automatically with Secure Boot, and that is an important defense against on-boot malware injection.

I'd say experiment. It's fun and kinda mandatory in the Linux world 😉

You need to disable secure boot for the installation process, but you can turn it back on afterwards. Secureboot just blocks the changes your new install needs to make once its installed it wont mess with anything, and you should have it on to prevent things like rootkits.