diff --git a/etc/archboot/allinone-lts.conf b/etc/archboot/allinone-lts.conf
index 25e1b1433..41f159b55 100644
--- a/etc/archboot/allinone-lts.conf
+++ b/etc/archboot/allinone-lts.conf
@@ -18,7 +18,7 @@ arch_syslinux arch_iptables arch_pciutils arch_usbutils arch_openvpn arch_vpnc a
 arch_smartmontools arch_licenses arch_wireless arch_wireless_staging_lts arch_linux_atm arch_netctl arch_fsarchiver \
 arch_vim arch_wipe arch_testdisk arch_ddrescue arch_chntpw arch_weechat arch_nmap arch_tcpdump \
 arch_speedtouch arch_openconnect arch_dnsmasq arch_platform arch_hypervisor arch_dmidecode \
-arch_wiki_lite arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitch net"
+arch_wiki_lite arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitcharch_lockdown-ms arch_prebootloader net"
 
 ### NETWORK SETUP
 # the default install media creating process, uses latest files from svn!
diff --git a/etc/archboot/allinone.conf b/etc/archboot/allinone.conf
index aa88b20af..a99cfd903 100644
--- a/etc/archboot/allinone.conf
+++ b/etc/archboot/allinone.conf
@@ -18,7 +18,7 @@ arch_openvpn arch_vpnc arch_pptpclient arch_smartmontools arch_licenses arch_wir
 arch_linux_atm arch_netctl arch_fsarchiver arch_vim arch_wipe arch_testdisk arch_ddrescue \
 arch_chntpw arch_weechat arch_nmap arch_tcpdump arch_speedtouch arch_openconnect arch_dnsmasq arch_platform \
 arch_hypervisor arch_dmidecode arch_wiki_lite arch_intel_ucode arch_amd_ucode arch_wvdial \
-arch_usb_modeswitch net"
+arch_usb_modeswitcharch_lockdown-ms arch_prebootloader net"
 
 ### NETWORK SETUP
 # the default install media creating process, uses latest files from svn!
diff --git a/etc/archboot/default-ftp-pxelinux.conf b/etc/archboot/default-ftp-pxelinux.conf
index 699294d53..58ae22795 100644
--- a/etc/archboot/default-ftp-pxelinux.conf
+++ b/etc/archboot/default-ftp-pxelinux.conf
@@ -18,7 +18,7 @@ arch_grub arch_refind arch_gummiboot arch_efilinux arch_efibootmgr arch_syslinux
 arch_usbutils arch_openvpn arch_vpnc arch_pptpclient arch_smartmontools arch_licenses \
 arch_wireless arch_wireless_staging arch_linux_atm arch_netctl arch_fsarchiver \
 arch_vim arch_platform arch_chntpw arch_pxelinux arch_dmidecode arch_wiki_lite \
-arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitch net"
+arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitcharch_lockdown-ms arch_prebootloader net"
 
 ### NETWORK SETUP
 # the default install media creating process, uses latest files from svn!
diff --git a/etc/archboot/default-ftp.conf b/etc/archboot/default-ftp.conf
index 9031c23dd..f44dc438a 100644
--- a/etc/archboot/default-ftp.conf
+++ b/etc/archboot/default-ftp.conf
@@ -19,7 +19,7 @@ arch_pciutils arch_usbutils arch_openvpn arch_vpnc arch_pptpclient arch_smartmon
 arch_licenses arch_wireless arch_wireless_staging arch_linux_atm arch_netctl arch_fsarchiver \
 arch_addons arch_vim arch_wipe arch_testdisk arch_ddrescue arch_chntpw \
 arch_platform arch_dmidecode arch_wiki_lite arch_intel_ucode arch_amd_ucode arch_wvdial \
-arch_usb_modeswitch net"
+arch_usb_modeswitcharch_lockdown-ms arch_prebootloader net"
 
 ### NETWORK SETUP
 # the default install media creating process, uses latest files from svn!
diff --git a/etc/archboot/default-pxelinux.conf b/etc/archboot/default-pxelinux.conf
index cf5f506dc..364742091 100644
--- a/etc/archboot/default-pxelinux.conf
+++ b/etc/archboot/default-pxelinux.conf
@@ -18,7 +18,7 @@ arch_grub arch_refind arch_gummiboot arch_efilinux arch_efibootmgr arch_syslinux
 arch_usbutils arch_openvpn arch_vpnc arch_pptpclient arch_smartmontools arch_licenses arch_wireless \
 arch_wireless_staging arch_linux_atm arch_netctl arch_fsarchiver arch_vim arch_pxelinux \
 arch_wipe arch_testdisk arch_ddrescue arch_chntpw arch_platform arch_dmidecode \
-arch_wiki_lite arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitch net"
+arch_wiki_lite arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitcharch_lockdown-ms arch_prebootloader net"
 
 ### NETWORK SETUP
 # the default install media creating process, uses latest files from svn!
diff --git a/etc/archboot/default.conf b/etc/archboot/default.conf
index c1766c78f..224f1a4ef 100644
--- a/etc/archboot/default.conf
+++ b/etc/archboot/default.conf
@@ -18,7 +18,7 @@ arch_pppoe arch_grub arch_refind arch_gummiboot arch_efilinux arch_efibootmgr ar
 arch_usbutils arch_openvpn arch_vpnc arch_pptpclient arch_smartmontools arch_licenses arch_wireless \
 arch_wireless_staging arch_linux_atm arch_netctl arch_fsarchiver arch_vim arch_wipe \
 arch_testdisk arch_ddrescue arch_chntpw arch_platform arch_dmidecide arch_wiki_lite \
-arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitch net"
+arch_intel_ucode arch_amd_ucode arch_wvdial arch_usb_modeswitcharch_lockdown-ms arch_prebootloader net"
 
 ### NETWORK SETUP
 # the default install media creating process, uses latest files from svn!
diff --git a/usr/lib/initcpio/install/arch_lockdown-ms b/usr/lib/initcpio/install/arch_lockdown-ms
new file mode 100644
index 000000000..f41053b70
--- /dev/null
+++ b/usr/lib/initcpio/install/arch_lockdown-ms
@@ -0,0 +1,15 @@
+#!/bin/bash
+# Created by Tobias Powalowski <tpowa@archlinux.org>
+
+build ()
+{
+    add_file "/usr/lib/lockdown-ms/LockDown_ms.efi"
+}
+
+help ()
+{
+cat<<HELPEOF
+  This hook includes lockdown-ms on an arch boot image.
+HELPEOF
+}
+
diff --git a/usr/lib/initcpio/install/arch_prebootloader b/usr/lib/initcpio/install/arch_prebootloader
new file mode 100644
index 000000000..7095dccc6
--- /dev/null
+++ b/usr/lib/initcpio/install/arch_prebootloader
@@ -0,0 +1,16 @@
+#!/bin/bash
+# Created by Tobias Powalowski <tpowa@archlinux.org>
+
+build ()
+{
+    add_file "/usr/lib/prebootloader/PreLoader.efi"
+    add_file "/usr/lib/prebootloader/HashTool.efi"
+}
+
+help ()
+{
+cat<<HELPEOF
+  This hook includes prebootloader on an arch boot image.
+HELPEOF
+}
+