Technically Secure Boot is the firmware verifying the bootloader -- not related to hardware. You can disable this on manufacturing but if the end user applies a

Technically Secure Boot is the firmware verifying the bootloader -- not related to hardware. You can disable this on manufacturing but if the end user applies a Cisco update in the future that re-flashes the firmware, your changes will be gone.