UEFI settings recommendations

[Tesph]

Hello Everyone,

My first post here. Happy to start up experimenting with Proxmox and the community

I'm looking for UEFI settings recommendations, but don't find many information about it in Manuals and forums.

Specifically, I'd like to know if the following features should be enabled or disabled ? :

1. Intel SpeedStep ?
   
   
2. Intel Trusted Execution Technology (Intel TXT) ?
   
   
3. Active State Power Management (ASPM) ?
   
   
4. Intel Speed Shift Technology ?
   
   
5. SMM Security Mitigation ?
   
   
6. Intel Turbo Boost Technology ?
   
   
7. Intel Hyper-Threading Technology ?

Sorry if this is redundant to another post. in that case, may one of you, please, redirect me toward this article ?

Thank you !

Tesph

 

[cykadelics]

I am also interested in this topic.

 

[LnxBil]

Intel Hyper-Threading Technology

The only one relevant to PVE, all others can be activated or nor, due to your liking and requirements.

 

[ucholak]

The only one relevant to PVE, all others can be activated or nor, due to your liking and requirements.

HT have positive performance benefits and security disadvantages.

if you need security (between VMs), check if cpu is not EOL, supported and microcode updated.
worst security vulnerability in virtual environment is "L1 Terminal Fault" (not sw/microcode mitigable on old cpus, just ht off).