2 ms·
As others have said, it's not a full-on brick (though I can see how it can be a pain to fix). However, the third-party MS certificate can be signed with your o
by vladvasiliu 4y ago
As others have said, it's not a full-on brick (though I can see how it can be a pain to fix).
However, the third-party MS certificate can be signed with your own keys, as described on that same page [1].
I don't have a need for that (my PCs don't need any option ROMs), but I did sign MS's main Windows key so that I can dual boot Win11 / Arch (which MS doesn't sign) with my own key registered in the UEFI.
[1] https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Dual_booting_with_other_operating_systems https://wiki.archlinux.org/title/Unified_Extensible_Firmware...