I found the typo in the command: wrong: zypper in -f openSUSE-signing-cert correct: zypper in -f openSUSE-signkey-cert After that the MOK Manager dialog appears on reboot. After enrolling and system startup the vboxdrv could be loaded. I don't know why this did not happened on first install of new cert or it may be overseen and the system started without enrolling. If it was overseen: Should not the dialog show on the next reboot?