Comment # 5 on bug 1191480 from Jiri Slaby

Works for me:
# mokutil --sb-state
SecureBoot enabled
# uname -r
5.14.11-20.g834dddd-default
# dmesg|grep -i Secure
Secure boot enabled
integrity: Loaded X.509 cert 'openSUSE Secure Boot CA:
6842600de22c4c477e95be23dfea9513e5971762'
integrity: Loaded X.509 cert 'openSUSE Secure Boot CA:
6842600de22c4c477e95be23dfea9513e5971762'
integrity: Loaded X.509 cert 'openSUSE Secure Boot Signkey:
c8bdc7ac1a1d85966217fd93ebfc14f4a200b814'