We have the plumbing in place to support secure boot, but we have not signed the first stage boot loader with the Microsoft Key which is what is embedded in most computer’s UEFI firmware. You can read more about it at Why should I disable secure boot (other distros don't require this) - #12 by jeremiah.