When purchasing a Librem laptop, you have presented with several options for boot firmware (“BIOS”):
PureBoot, configured in Basic mode. This is the simplest choice. If you have a Librem Key, you can disable Basic mode and configure PureBoot with your Librem Key at any time. You can also switch to coreboot+SeaBIOS, a traditional BIOS firmware, using Purism’s coreboot utility.
The same as above, with the Librem Key shipped separately from the device. This means that a malicious person cannot have your laptop and your Librem Key at the same time, thus leveling up protection.
The same as above, with additional measures to make any tampering attempts during transit obvious. We will initiate a secure line of communication with you (via encrypted email or chatroom) in order to arrange this. Note that this option may delay shipping of your laptop for a few days. See anti-interdiction services announcement for more info.