(In reply to Ancor Gonzalez Sosa from comment #33) [snip] > B) Modify grub2 to incorporate an extra step during its installation for > importing the keys in case they are not all imported. Does it have to always happen or an one-off thing during the last stage of installation process ? If it is on-off then I think yast hook is better. > > C) Similar to (B) but in yast2-bootloader instead of in Grub2. Maybe in shim-install ? As it is taking care MokManager installation.