Alongside TPM, Microsoft leans heavily on Secure Boot, which checks that the bootloader is signed with a trusted certificate before the operating system starts. On PCs certified for Windows, the ...