Used by these models

Technical Specifications

StandardUEFI Forum Secure Boot
Key DatabasesPK, KEK, db (allowed), dbx (forbidden)
Windows 11Required (recommended, not enforced on install)
Linux SupportVia signed shim (Ubuntu, Fedora, RHEL, SUSE)
Custom KeysSupported via MOK (Machine Owner Key)