Comment # 2 on bug 1191989 from Guillaume GARDET

Secureboot on aarch64 works, but nothing is signed by Microsoft. So, you need
to use openSUSE keys for Tumbleweed.
This is tested in openQA, see: https://openqa.opensuse.org/tests/1989487