Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
(www.welivesecurity.com)
On some systems you can clear all secure boot keys, including Microsoft's, then provision your own and sign your bootloader or kernel with it. Windows cannot boot from such systems.