3 ms·
AIUI, you can use the shim to boot end-user-enrolled code, even if it's not signed by the MS key, but it will only do so pursuant to direct user interaction. S
by 0815test 7y ago
AIUI, you can use the shim to boot end-user-enrolled code, even if it's not signed by the MS key, but it will only do so pursuant to direct user interaction. So the shim effectively replicates the standard SB model, where the end-user has the option to disable it or not in the BIOS, but it's enabled by default.