TCB is just a standard to provide a Trusted Computing Base for zero trust environments from the hardware up. Basically, the UEFI BIOS is signed, and cannot be t

TCB is just a standard to provide a Trusted Computing Base for zero trust environments from the hardware up. Basically, the UEFI BIOS is signed, and cannot be tampered with. If it is, the machine won’t boot