Verification of option roms as a part of secure boot is a part of the normal uefi spec, however some vendors forgot to implement it https://docs.microsoft.com/

Verification of option roms as a part of secure boot is a part of the normal uefi spec, however some vendors forgot to implement it https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/uefi-validation-option-rom-validation-guidance https://docs.microsoft.com/en-us/windows-hardware/manufactur...