(In reply to Andrei Borzenkov from comment #12) > Did you enrolled certificate before or after installing my GRUB? Certificate > comes with new package. > After. The .cer file is in the path you mentioned and the sha1sum of the file is "ee4faab497e33c14b61d00354e8a2ec5e469821c"; the same sha1 fingerprint is shown by "mokutil -l". > Try using MokManager; copy certificate to ESP and start MokManager there. > Just to be sure to eliminate mokutil problem. I installed using MokManager using grub2 boot menu. I repeated the process removing the certificate and installing it again. Same result as before: "Verification failed: (15) Access Denied". In addition, I didn't mention it before I get more messages as I hit enter "Could not install security protocol: (2) Invalid Parameter".