(In reply to Tripple Moon from comment #122) > (In reply to Gary Ching-Pang Lin from comment #119) > > (In reply to Tripple Moon from comment #115) > > > I understand that method all too well, but the problem is that on my machine > > > "mokutil --import" does not work properly and gives an error. > > Is there any error message? > > I would be happy to try if i had a certificate to try with xD You can pick one pem file in /etc/ssl/certs/ and convert it into DER format with openssl: $ openssl x509 -in <pem file> -outform DER -out cert.der Then try mokutil with it: # mokutil --import cert.der --root-pw This just creates the request so the key is not enrolled yet. Just don't enroll the key once you reach MokManager. Check the request: # mokutil --list-new Remove the request: # mokutil --revoke-import