it says it works on signatures so I suppose it should be detached first but it crashes anyway sbattach --detach sig /boot/vmlinuz-5.14.5-1-default sbsiglist --type x509 sig Segmentation fault (core dumped) sbsiglist --type sha256 sig Segmentation fault (core dumped)