題外話：下個月微軟的secure boot certificate要過期

https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e 有的機器可能要升級firmware才能d得到新certificate