Can someone double check this before I make the change? https://fedoraproject.org/wiki/GRUB_2 1. Under "Install the bootloader files" grub2-efi-modules shouldn't be listed. An unsuspecting user who then uses grub2-install as they once did on BIOS systems will blow away the signed grubx64.efi file and boot will fail on Secure Boot enabled systems. 2. Also under "install the bootloader files" it lists the shim package, but this should be shim-signed in order to include the shim.efi that's been signed by the Microsoft signing service. The shim package only contains an unsigned shim. So the revised commands are: yum install grub2-efi shim-signed yum reinstall grub2-efi shim-signed Thanks, -- Chris Murphy -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct