https://bugzilla.suse.com/show_bug.cgi?id=1195118 https://bugzilla.suse.com/show_bug.cgi?id=1195118#c38 --- Comment #38 from Stefan Hundhammer <shundhammer@suse.com> --- Please correct me if I am wrong, but how about this general approach: - Don't rely on that post-install mokutil call being successful. - Use mokutil's introspection features when the certificates are actually needed; i.e. during the dracut run. - If the certs are not already imported at that time, do it then. At that point in time, there are better chances of the crucial infrastructure (/etc/shadow) being in place. I guess right now it's not only during a YaST installation that this doesn't work; it's probably the same for a kiwi or an image installation, or when doing zypper calls manually. Moving that part to the dracut run should fix all those scenarios. -- You are receiving this mail because: You are on the CC list for the bug.