Comment # 5 on bug 1083723 from Joey Lee

(In reply to Jiri Slaby from comment #4)
> (In reply to Joey Lee from comment #3)
> >   # mokutil --root-pw --import public-256.der
> 
> I am missing one more step -- how to take the cert from the BS?

Try this example:

osc signkey --sslcert Devel:Kernel:SLE12:KMP > ibs-devel-kernel.crt