What are the various PureBoot options offered?

When purchasing a Librem laptop, you have presented with several options for boot firmware (“BIOS”):

• Default: PureBoot Basic:

PureBoot, configured in Basic mode. This is the simplest choice. If you have a Librem Key, you can disable Basic mode and configure PureBoot with your Librem Key at any time. You can also switch to coreboot+SeaBIOS, a traditional BIOS firmware, using Purism’s coreboot utility.

• PureBoot Bundle:

Preconfigured PureBoot: Librem Key with factory-generated GPG key. The Librem Vault USB drive is used to store the public GPG key.

For an explanation of PureBoot, please read through the PureBoot FAQ category. You can also see it in action.

• PureBoot Bundle Plus:

The same as above, with the Librem Key shipped separately from the device. This means that a malicious person cannot have your laptop and your Librem Key at the same time, thus leveling up protection.

• PureBoot Bundle Anti-Interdiction

The same as above, with additional measures to make any tampering attempts during transit obvious. We will initiate a secure line of communication with you (via encrypted email or chatroom) in order to arrange this. Note that this option may delay shipping of your laptop for a few days. See anti-interdiction services announcement for more info.