diff --git a/SOURCES/clsecureboot001.cer b/SOURCES/clsecureboot001.cer
new file mode 100644
index 0000000..ca9ce5d
Binary files /dev/null and b/SOURCES/clsecureboot001.cer differ
diff --git a/SPECS/grub2.spec b/SPECS/grub2.spec
index f58fee8..419039d 100644
--- a/SPECS/grub2.spec
+++ b/SPECS/grub2.spec
@@ -24,7 +24,7 @@ Source6:	gitignore
 Source8:	strtoull_test.c
 Source9:	20-grub.install
 Source12:	99-grub-mkconfig.install
-Source13:	almalinuxsecurebootca0.cer
+Source13:	clsecureboot001.cer
 Source19:	sbat.csv.in
 
 %include %{SOURCE1}
@@ -32,16 +32,16 @@ Source19:	sbat.csv.in
 %if 0%{with_efi_arch}
 %define old_sb_ca	%{SOURCE13}
 %define old_sb_cer	%{SOURCE13}
-%define old_sb_key	almalinuxsecurebootca0
+%define old_sb_key	clsecureboot001
 %define sb_ca		%{SOURCE13}
 %define sb_cer		%{SOURCE13}
-%define sb_key		almalinuxsecurebootca0
+%define sb_key		clsecureboot001
 %endif
 
 %ifarch ppc64le
 %define old_sb_cer	%{SOURCE13}
 %define sb_cer		%{SOURCE13}
-%define sb_key		almalinuxsecurebootca0
+%define sb_key		clsecureboot001
 %endif
 
 # AlmaLinux: keep upstream EVR for RHEL SBAT entry
@@ -509,7 +509,7 @@ fi
 
 %changelog
 * Fri Oct 07 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 2.06-138.alma
-- Use AlmaLinux cert and SBAT
+- AlmaLinux changes
 
 * Wed Jul 20 2022 Robbie Harwood <rharwood@redhat.com> - 2.06-138
 - Rotate signing keys on ppc64le