Secure boot is often straightforward to demonstrate on a development board. Generate a key pair, sign the firmware, enable secure boot, and verify that the device boots correctly. Production is a different story.
Source: [Dev.to](https://dev.to/ag_82a1d5551e40a/esp32-secure-boot-in-production-how-to-protect-signing-keys-and-provision-devices-securely-283f)