https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c2 --- Comment #2 from Marcus Meissner <meissner@suse.com> --- The shim task is only to block the old key via a deny list. The enrollment should work though, although I am not 100% sure that this works on Arm64. would be nice to run this mokutil stand alone. try perhaps: mokutil --import /etc/uefi/certs/1F673297.crt --root-pw --ignore-keyring -- You are receiving this mail because: You are on the CC list for the bug.