Incidentally.. Microsoft will have two keys. One for Windows, and another for "third party" stuff.

So they can revoke everyone's software and leave theirs working.

BTW: Anyone interested in the abuses that UEFI allows should read both the UEFI guidelines and the Mic
rosoft Mandate (the rules they apply to OEMs for Win8 certs, and anyone wanting to have their software
 signed).

Microsoft's rules violate several of the guidelines - unsurprisingly those to do with who actually con
trols the PC