shim

• Small primary loader
• Permissive licence
• Signed by Microsoft after review
• Embed your own key(s)
• We embed the Debian SecureBoot CA
• Adds another trusted keyring:
• Machine Owner Key (MOK)
• Useful for DKMS etc.