diff --git a/docs/admin/hardware.rst b/docs/admin/hardware.rst
index 3612927..e09011d 100644
--- a/docs/admin/hardware.rst
+++ b/docs/admin/hardware.rst
@@ -37,6 +37,29 @@ The instructions below assume the use of a Linux-based computer for the creation
 - Visit `<https://support.lenovo.com>`_ in the Linux-based computer. Type the machine type found above into the search bar, then press **Enter**.
 - In the T480 Product Home page, select **Drivers And Software** and choose **BIOS/UEFI**.
 - Expand the **BIOS Update** listing and download the **BIOS Update (Bootable CD)** file.
+
+.. note::
+  A Tails USB can be used for the verification and conversion process described below, but the Lenovo support site blocks requests over Tor, preventing the ISO download. To work around this, either:
+
+  - download the BIOS ISO on a different computer and transfer it to Tails using a USB stick, or
+  - download the ISO in Tails using the Unsafe Browser as follows:
+
+    - Start Tails with an administration password set in the Welcome Screen.
+    - Open the Unsafe Browser: **Applications > Internet > Unsafe Browser** and find and download the ISO
+    - Note the filename, as you'll need it for subsequent steps.
+    - Leave the Unsafe Browser running, and open a terminal via **Applications > System Tools > Terminal**.
+    - Copy the ISO to the desktop with the command:
+
+      .. code-block:: sh
+
+        sudo cp /var/lib/unsafe-browser/chroot/home/clearnet/Downloads/<fileName.iso> ~amnesia/Desktop
+
+    - Fix the ISO file's ownership with the command:
+
+      .. code-block:: sh
+
+        sudo chown amnesia:amnesia ~amnesia/Desktop/<fileName.iso>
+
 - Verify the checksum of the downloaded ISO file using the following command, comparing it against the checksum in the file listing above:
 
   .. code-block:: sh
diff --git a/docs/admin/install.rst b/docs/admin/install.rst
index f8f61d7..9483b7f 100644
--- a/docs/admin/install.rst
+++ b/docs/admin/install.rst
@@ -36,6 +36,9 @@ In order to install SecureDrop Workstation and configure it to use an existing S
 
 - The SecureDrop instance's Admin Workstation and Secure Viewing Station (SVS) USBs, and the full GPG fingerprint of the submission key.
 - A working computer (Linux is recommended and assumed in this guide) to use for verification and creation of the Qubes installation medium.
+
+  .. note:: A Tails USB can be used to perform the tasks below, but due to the size of the Qubes installation ISO, it may make sense to download it on another computer rather than via Tor, and then to use a USB stick to transfer it to Tails for verification and creation of the installation medium.
+
 - A password manager or other system to generate and store strong passphrases for Qubes full disk encryption (FDE) and user accounts.
 
 A basic knowledge of the Qubes OS is helpful.