The UEFI spec calls for allowing user enrollment of keys, or at the very least disabling the checks. It can be done, this has been discussed to death here alrea

The UEFI spec calls for allowing user enrollment of keys, or at the very least disabling the checks. It can be done, this has been discussed to death here already. http://mjg59.dreamwidth.org/12368.html http://mjg59.dreamwidth.org/12368.html edit: recoiledsnake makes an interesting point above.