Yung Chou has a blog post on Windows 10’s implementation of UEFI Secure Boot:
An Introduction of UEFI Secure Boot in Windows 10 Enterprise
As a firmware interface standard to replace BIOS (Basic Input/Output System), UEFI (Unified Extensible Firmware Interface) specification has been a collective effort by UEFI Forum members for a while. UEFI is in essence an abstraction layer between firmware and OS, and independent of device hardware and architecture. Which provides flexibility for supporting multiple and various OS environments and as well acts as a generic target boot environment of drivers for cross-platform compatibility, as opposed to the need to develop a particular driver for particular hardware. With UEFI, there are also security opportunities to better defend a class of malware like bootkit and rootkit targeting the pre-boot environment of a device. […]
An Introduction of UEFI Secure Boot and Disk Partitions in Windows 10
Firmware Security 