> Anything 11th gen or newer locks libreboot or coreboot out.
Not all OEMs are doing this. (And some are even shipping 11th generation with coreboot). But you're right in that it's making things worse.
Not all OEMs are doing this. (And some are even shipping 11th generation with coreboot). But you're right in that it's making things worse.
Linux fwupdmgr can be used to verify the secure boot status and you will fail HS2 if this is not fused.
Also.... would be happy to know who doesn't fuse it on newer machines. And even coreboot does not mean you can flash your own. You can have a lockdown where you can only load the OEMs coreboot.