With the release of Windows 8, Microsoft began requiring OEM devices to ship with UEFI system firmware, configured by default to only allow the execution of operating system binaries digitally signed by Microsoft (UEFI secure boot). Concerns were raised that this requirement would hinder the use of alternate operating systems such as Linux. In a post discussing secure boot on the "Building Windows 8" blog, Microsoft developer Tony Mangefeste indicated that vendors would provide means to customize secure boot, stating that "At the end of the day, the customer is in control of their PC. Microsoft's philosophy is to provide customers with the best experience first, and allow them to make decisions themselves." As such, vendors were required to provide means for users to re-configure or disable secure boot (although devices running Windows RT, a variation of Windows 8 for ARM architecture, have locked firmware where this cannot be disabled). No mandate is made regarding the installation of third-party certificates that would enable running alternative programs.