See the recent announcement of Arm SystemReady SR and ES, which is a standard mandating UEFI across the board. Yes, Secure Boot can be disabled on Windows on A

See the recent announcement of Arm SystemReady SR and ES, which is a standard mandating UEFI across the board. Yes, Secure Boot can be disabled on Windows on Arm systems in the same way as Windows on x86_64 systems. For Windows on Arm laptops, you cannot quite use upstream kernels at this point w/ full functionality, see https://github.com/aarch64-laptops/build https://github.com/aarch64-laptops/build. (being rebased continuously). For other Arm machines, like servers, you can just use regular kernels though. And over custom partitions and other things, it's just UEFI now, the firmware itself is in a secondary SPI flash or an UFS namespace. * you might always need to run a script to extract firmware for the GPU/modem and such, which are OEM-signed on Qualcomm Windows/arm64 devices. That firmware is then put to /lib/firmware/.