Register for Our Webinar

Is Secure Boot Actually On for Your Servers? I Checked. It Wasn't.

Wednesday, September 16, 2026 4:00 PM UTC

I assumed my cloud servers were protected by Secure Boot. I was wrong, and not in the way I expected. It wasn't off. It was on, and enforcing nothing.

Secure Boot is the first link in your system's chain of trust. It runs before your OS, your agents, and your monitoring exist, and it decides whether the kernel that boots is really yours. If an attacker can tamper with what boots, they control the machine underneath every tool you would use to catch them, and nothing running above it can be trusted.

Yet on common cloud images, Secure Boot reports as enabled while enforcing nothing. With no keys enrolled, it sits in a mode where it verifies nothing and would happily boot a tampered kernel. All the plumbing with none of the protection.

In this session, you'll learn what Secure Boot really does and how to take control of it. You'll run one command against your own servers, live, to check if Secure Boot is enabled and enforcing. I'll show you why "enabled" does not mean "enforcing," and what Secure Boot actually needs before it protects anything. Then we'll take ownership of the trust root and watch a machine reject a tampered kernel image, before the operating system even starts.

You'll leave knowing what Secure Boot actually verifies, how to take ownership of your trust root, one command you can run today to check your own machines, and how to prove it works for yourself on a test VM. No agents, no vendors, no dedicated security team required.

By registering after the event has passed, you will receive a recording of the webinar.