> Maybe your problem is holding on to grub(legacyware IMO) My problem is that I can't enroll keys, going through the enroll procedure (which doesn't involve gr

> Maybe your problem is holding on to grub(legacyware IMO) My problem is that I can't enroll keys, going through the enroll procedure (which doesn't involve grub) results in ... nothing. I'm not specifically wedded to grub, and a UKI signed with a key is a fine idea if I can get a key installed. As such, I'll try sbctl but I have no particular reason to think it will work where shim/mokmanager fail if there's a motherboard issue of some sort. There may well be challenges using grub down the line, but right now I'm not even getting far enough for that to be an issue.