If you’re happy without Secure Boot, you can skip this step. The following will erase all keys on your system, create your own keys, and use them to sign all the binaries needed to keep your computer running.
There are a lot of way to customize rEFInd and if you want to spice it up, I recommend going for it. There are also a few themes out there you can use as well. I have my own custom setup at my github repo. This time round, we’ll clean up the bootloaders on the Surface Pro and customize rEFInd.
The following guide was used to tripple boot Windows 10, Kali Linux, and ArchLabs Linux on a Surface Pro 3; with a customized bootloader; and the option to enable Secure Boot with your own keys.