Where is SUSE shim certificate for secure boot?

SUSE Linux Enterprise Server SLES Install-Boot
1

Our x86_64 machine under development is using SLES (11sp3 and will use 12 once it’s released).
The system is with UEFI Secure boot.

From SUSE Doc: Administration Guide, I learned

SUSE starts with shim—a small and simple EFI boot loader—which was originally developed by Fedora. It is signed by a certificate signed by the SUSE KEK and a Microsoft-issued certificate, based on which KEKs are available in the UEFI key database on the system.

(https://www.suse.com/documentation/sles11/book_sle_admin/data/sec_uefi_secboot.html)

We want to enroll SLES bootloader shim’s certificate into our firmware key database so that SLES installation/booting can run with secure boot enabled.
Where can I find SUSE shim’s certificate?
Thanks.

2

Hi
The der files should be down in ls /usr/lib64/efi/?

–
Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
openSUSE 13.1 (Bottle) (x86_64) GNOME 3.10.2 Kernel 3.11.10-7-desktop
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below… Thanks!

3

Thanks, malcolmlewis.

I can also find the same certificate files (.der) in SLES_DVD/suse/x86_64/shim-xxxxx.x86_64.rpm