Both userspace or externally, including the boot ROM, from Windows or Linux.
You could flash coreboot and run your own secure boot chain etc on one machine, but this is absolutely not something you can do at organisational scale.
That said, only individuals worried about foreign intelligence services need to incorporate this into their threat model.
You could flash coreboot and run your own secure boot chain etc on one machine, but this is absolutely not something you can do at organisational scale.
That said, only individuals worried about foreign intelligence services need to incorporate this into their threat model.