Comment # 2 on bug 1214005 from Takashi Iwai

If it's a package from OBS hardware project, it's no part of official release,
hence it's never signed with the official key.  You'd have to import the OBS
project's cert file manually and deploy for MOK by yourself.

For other issue, please open another report.