The OEM can use instructions from the firmware manufacturer to create Secure boot keys and to store them in the PC firmware. If the signatures are valid, the PC boots, and the firmware gives control to the operating system. When the PC starts, the firmware checks the signature of each piece of boot software, including UEFI firmware drivers (also known as Option ROMs), EFI applications, and the operating system. Secure boot is a security standard developed by members of the PC industry to help make sure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM).
