Apple macOS 10.13.6: UEFI SecureBoot support for iMac Pro

macOS 10.13.6 update brings (limited) UEFI SecureBoot support for iMac Pro, so now if SecureBoot is enabled, Windows detects that and acts accordingly.

PK, KEK, db and dbx are read-only (hence limited), configured to trust MS 1st-party CA only. pic.twitter.com/M81xcJB1RG

— Nikolaj Schlej (@NikolajSchlej) July 9, 2018

UEFI CA is used to sign many things, none of which is supported.
We don't trust MS 1st-party by default too, BootCamp needs to be used to enable that first.

— Nikolaj Schlej (@NikolajSchlej) July 10, 2018

Send a bug report (https://t.co/NLzOFixGG7) stating that you need SecureBoot support for custom keys and/or 3rd-party OSes.

Right now the only way out for such OSes is to disable SecureBoot.

— Nikolaj Schlej (@NikolajSchlej) July 10, 2018