Topic: secure-boot

• UEFI boot entries and Secure Boot state on Linux and Windows

  efibootmgr and bcdedit /enum firmware both read and rewrite the UEFI boot-entry list that decides what the firmware tries to start and in what order, while mokutil --sb-state and Confirm-SecureBootUEFI report whether Secure Boot is currently enforced — separate from, and a precondition for, shim/MOK trust of a third-party kernel module.

  methodology · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON