http://www.networkworld.com/communit...t-turn-secure-
boot-red-hat-warns

Users who buy systems that ship with no way to turn secure boot off, and
only Microsoft's key installed, will not be able to load Linux or any
other non-Microsoft operating system. Users who buy systems that allow
secure boot to be disabled, but only Microsoft's key installed, will have
to give up the rootkit protection secure boot offers if they want to run
unsigned operating systems or drivers.

Again, enterprise IT professionals should let their OEMs know that they
want the choice and control in their own hands, and not in the operating
system vendor's. You shouldn't have to give up the benefits of secure
boot to have authority over your own fleet of PCs.