

That’s right. The user (or administrator if it’s a work machine) installs or removes acceptable certificates into firmware database. Typically a device you buy in the past 15 years or so comes with Microsoft certificates preinstalled, but it doesn’t have to stay like that.


The trick is not to think about, anything ever