Comment # 5 on bug 1018741 from lists dev

> It's easier to see the logo when booting the guest with sdl or vnc, and the
> logo will be gone quickly.

Booting to SDL did the trick.

In the TianoCore config, it says SecureBoot current state is "Enabled".

I DE-selected "Attempt SecureBoot", SAVED and restarted.

It still boots to the error message.  If I repeat config entry, it still says
"Enabled", even thought the check-box remains DE_selected.

In the TianoCore config's 'Boot Manager Menu' the options are

    [opensuse-secureboot]
    UEFI floppy
    UEFI floppy 2
    UEFI QEMU HARDDISK QM00001
    UEFI Misc Device
    UEFI Misc Device 2
    UEFI Misc Device 3
    UEFI Misc Device 4
    EFI Internal Shell

where 

    [opensuse-secureboot]

is selected