these must have secure boot enabled by default, and provide ways for users to disable or re-configure the feature.
What requirements do Microsoft certified devices have?
must have secure boot enabled by default, and provide ways for users to disable or re-configure the feature