.Secure boot `shim` signing for RHEL 10 on `x86_64` and `aarch64` RHEL 10 requires a signed `shim` binary to enable secure boot on AMD and Intel 64-bit architectures and on the 64-bit ARM architecture. Without a signed and trusted `shim`, systems with enforced secure boot did not boot, which affected both enterprise and cloud deployments. With this release, the `shim` package was signed and updated for ‎`x86_64` and ‎`aarch64`. On ‎`x86_64`, `shim` is signed by Microsoft Windows UEFI Driver Publisher and includes Red Hat Secure Boot CA 5 and CA 8 in the vendor database. On ‎`aarch64`, `shim` is signed by Microsoft UEFI CA 2023 and includes Red Hat Secure Boot CA 8. The SBAT entries were updated to the latest levels. As a result, RHEL boots with the secure boot feature enabled. Additionally, the fallback works properly, and all other bootloader components are correctly signed.