Nikolaj has written a 7th part to his 6-part series on UEFI security!
It covers AMD security processors, Intel STM, Intel SGX, TPM 2.0, and other current technologies.
There is mention at the end of an upcoming article on taming Secure Boot, generating your own keys, looking forward to that!