15.1.44 shim_lock

If this variable is set to ‘y’, it means that the shim_lock verifier is registered (see see UEFI secure boot and shim support).