Secure Boot 101: Getting Started with Secure Boot
Secure Boot adds an extra layer of protection to the booting process of a computer by allowing only digitally signed and trusted components to initiate the system boot. It safeguards against unauthorized and potentially harmful software. This feature came in 2012 with Windows 8 and is supported by all Ubuntu 64-bit versions. It works by checking for an encrypted signature in EFI programs; if the signature is absent or inconsistent with a system key, the firmware will not execute the program.