Secure Boot: Where is the Fedora MOK key installed?

[vekruse (Villy Kruse)]

@wsanders

So, where is the MOK key stored? Presumably it’s enrolled somewhere the first time I install the shim package?

It is baked into the shim, but you can extract it using mokutil --export. You can find the original at https://src.fedoraproject.org/rpms/shim-unsigned-x64/tree/rawhide