What I didn't tell: There are three computers with the same problem. On all three computers shim is version 15.4-4.7.1 On the first one (aldi medion) shim-install did the trick, but when booting (every boot) it says: "Create new secret key sk ... EFI_RING_PROTOCOL unavailable, hibernation secret key is not generated: EFI_NOT_FOUND". At least the first system is booting with secure boot enabled but without option to hibernate. On the other systems (Lenovo IdeaPad, and Lenovo IdeaCentre) shim-install failed with: "'/boot/efi/EFI/boot' cannot be created: The file is already existing." The error message is a little strange. I see, there is a directory '/boot/efi/EFI/Boot' (named "Boot", not "boot"). I don't know if it's save to rename "Boot" to "boot". Will this break the whole system (opensuse and win10)? But if this name exists on real systems, shouldn't shim-install care about it?