[csdvrx]

> It won't boot Windows

You can sign the Windows bootmg efi files with your own keys if you want.

[vladvasiliu]

According to the arch wiki that doesn't always work so well (didn't try it, though). But what does, is signing the MS certificate with your own key. I do that on my work laptop and it works well. I don't need windows on my personal one.

https://wiki.archlinux.org/title/Unified_Extensible_Firmware...