16.2. Notable changes to boot loader
Secure Boot shim signing for RHEL 10 on x86_64 and aarch64
Red Hat Enterprise Linux (RHEL) 10 requires a signed shim binary to support Secure Boot on x86_64 and aarch64 architectures. The shim functions as the initial bootloader, verifying and loading subsequent boot components if you enabled Secure Boot. If a signed and trusted shim is not available, RHEL 10 cannot boot on systems with Secure Boot enforced. This limitation might affect deployments in enterprise and cloud environments.