What were you trying to do that didn't work?

What is the impact of this issue to you?

 
To deal with multiple certificates optionally enrolled on a system, including the Microsoft UEFI 2011 and Microsoft UEFI 2023 certs as well as future PQC roots of trust, we need to be able to select which shim to install during installation and upgrades.

To do that, we need a tool that can evaluate the enrolled roots of trust and select bootloaders based on their signatures.

Please provide the package NVR for which the bug is seen:

How reproducible is this bug?:

Steps to reproduce

Expected results

Actual results