Despite all the hate surrounding Secure Boot, I frankly think it's a good idea, if it can be turned off by the user (which it can be on non-ARM systems). My laptop didn't have Windows 8 installed, but it is relatively new and has UEFI firmware. I haven't seen any options for Secure Boot in the UEFI settings, but at the time the computer was purchased, Microsoft had already provided OEMs with Secure Boot specifications, and the OEM is encouraging me to upgrade to Windows 8.
Is there any way for me to turn on Secure Boot myself? Do I need to configure something in Windows in order for UEFI to attempt it, or is there a UEFI setting that I'm either not seeing or is unavailable? Will Secure Boot be possible with an eventual firmware upgrade, or is it embededded at a hardware level that can't be added after the fact?
I'm not sure it's relevant, since I'm looking for a canonical answer that applies to all computers, but in case it helps you find an answer, I'm using a Lenovo Thinkpad x230. I'll update with the UEFI revision number the next time I reboot.