> Other operating system vendors are free to arrange with hardware manufacturers to include certificates for their operating systems. Actually, this isn't quit

> Other operating system vendors are free to arrange with hardware manufacturers to include certificates for their operating systems. Actually, this isn't quite true. It turns out that the Secure Boot specification only allows for a single valid certificate in certain places. "...the UEFI specification only allows an image to be signed by a single key" - https://lists.ubuntu.com/archives/ubuntu-devel/2012-June/035445.html https://lists.ubuntu.com/archives/ubuntu-devel/2012-June/035...