Can you use the ZBM release EFI binary + UEFI Secure Boot?

[bkshoemaker]

I'm interested in enabling Secure Boot on my machine but I'm unclear if the premade EFI binaries on the release page can work in that capacity. Are they signed already, and if so would the keys need to be enrolled on my machine (if I understand this process correctly)? If not, can I sign them myself somehow?

Forgive me if I've missed anything in the docs, but I've been unable to find definitive info on the subject (and my unfamiliarity with Secure Boot in general isn't helping), so any advice on best practices or links to resources I've missed would be helpful in getting started.

[zdykstra]

The EFI binaries we provide are not signed. You can enroll your own keys and sign the binary, though. Any generic secure boot guide will apply to our EFI binary.