Re: 6.2.1 will have lockdown patches

Hi Michal, If you mean to do this CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY='y' mokutil --import ./vmware.joe.der reboot enroll key Then that does not solve the issue as the modules are signed but modprobe still reports they are not signed. * NOTE: I did remove the key using mokutil --delete first, then reboot and remove using MokManager, BEFORE I tried the above. If you meant something else could you please be more specific and I will try it. Thanks! Joe