(In reply to Fabian Vogt from comment #10) > running (only) Leap 15.4 Please show efibootmgr -v ls -lR /boot/efi /sys/firmware/efi/efivars/SbatLevelRT-605dab50-e046-4300-abb6-3dd810dd8b23 rpm -q shim For this to happen 1. new shim had to boot at least once to update SbatLevel 2. somehow old shim was used after that We need to find out where this old shim comes from.