Comment # 25 on bug 947816 from Mike Galbraith

> So the question is whether you still get this particular error even with the
> local kernels without CONFIG_KEXEC_VERIFY_SIG.  Please clarify it: whether
> the same error "kexec_file_load failed: Key was rejected by service" appears
> even for kernels without that kconfig.

Yeah, it's SLE/SLERT kernels, and my mainline/stable/tip -rt trees, which I
also configure with an enterprise derived config.

With maintenance lag time being what it is, if I want tools that can handle all
of the kernels I work on, I'm gonna have to fix them up myself anyway, so it's
not a big hairy deal, it just seems to that you should be able to use a stock
suse workstation to work on any suse kernel, which you can't.