diff --git a/config.yaml b/config.yaml
index 49edcfc..7ed41ac 100644
--- a/config.yaml
+++ b/config.yaml
@@ -420,6 +420,21 @@ actions:
               %define pesign_name_0 almalinuxsecureboot0
         count: 1
 
+      - target: "spec"
+        find: |
+            %if 0%{?centos}
+                    UKI_secureboot_name=centossecureboot204
+                    UKI_secureboot_cert=%{_datadir}/pki/sb-certs/secureboot-uki-virt-%{_arch}.cer
+            %else
+            	# RHEL only builds UKI for x86
+            	UKI_secureboot_name=redhatsecureboot504
+            	UKI_secureboot_cert=%{SOURCE153}
+            %endif
+        replace: |
+            UKI_secureboot_name=%{pesign_name_0}
+            UKI_secureboot_cert=%{_datadir}/pki/sb-certs/secureboot-uki-virt-%{_arch}.cer
+        count: 1
+
   - run_script:
       - script: "create_symlinks.sh"