Looking more closely at the debug.log before the stall, I see the shim.efi open ... [Bds]Booting opensuse-secureboot FSOpen: Open '\EFI\opensuse\shim.efi' Success [Bds] DevicePath expand: HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi -> PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi As you indicate, it apparently makes a 'decision', and continues [Security] 3rd party image[0] can be loaded after EndOfDxe: PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi. InstallProtocolInterface: 5B1B31A1-9562-11D2-8E3F-00A0C969723B 7DB68040 Loading driver at 0x0007CFBC000 EntryPoint=0x0007CFDA000 InstallProtocolInterface: BC62157E-3E33-4FEC-9920-2D3B36D750DF 7DB87118 FSOpen: Open '\EFI\opensuse\grub.efi' Success PixelBlueGreenRedReserved8BitPerColor ... Note that it appears to next Open \EFI\opensuse\grub.efi Isn't that supposed to be \EFI\opensuse\grubx64.efi ? At this point I'm not at all sure what to expect, and am just hunting for clues as to why it stalls.