From 78206dd5954915d9527aa67f4822ca0fd73b2cb0 Mon Sep 17 00:00:00 2001
From: trytomakeyouprivate
 <113100745+trytomakeyouprivate@users.noreply.github.com>
Date: Mon, 22 Jan 2024 23:19:34 +0000
Subject: [PATCH] added boot from usb, changed formatting

---
 PREINSTALL-README.md | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/PREINSTALL-README.md b/PREINSTALL-README.md
index 10043ae..0a70a67 100644
--- a/PREINSTALL-README.md
+++ b/PREINSTALL-README.md
@@ -4,9 +4,13 @@ The recommended method to install secureblue is to rebase from an upstream silve
 
 ## Preinstall guide
 
-- During the installation, select the option to encrypt the drive you're installing to.
-- Use a strong password when prompted.
+Fedora Installation
+- Select the option to encrypt the drive you're installing to.
+- Use a [strong password](https://security.harvard.edu/use-strong-passwords) when prompted.
 - Leave the root account disabled.
-- Ensure secureboot is enabled in your bios.
-- Ensure your bios is up to date by checking its manufacturer's website.
-- Set a bios password to prevent tampering
\ No newline at end of file
+
+BIOS Hardening
+- Ensure secureboot is enabled.
+- Ensure your BIOS is up to date by checking its manufacturer's website.
+- Disable booting from USB (some manufacturers allow firmware changes from live systems).
+- Set a BIOS password to prevent tampering.