From ac4129387132ac08f55acf66fddcc3c7730b7aea Mon Sep 17 00:00:00 2001
From: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
Date: Mon, 20 Apr 2026 15:18:20 +0530
Subject: [PATCH] Update the signing cert on the azure KV

Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
---
 build_library/sbsign_util.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build_library/sbsign_util.sh b/build_library/sbsign_util.sh
index 66ebe9c2b6..8b084238a1 100644
--- a/build_library/sbsign_util.sh
+++ b/build_library/sbsign_util.sh
@@ -6,7 +6,7 @@ if [[ ${COREOS_OFFICIAL:-0} -ne 1 ]]; then
     SBSIGN_KEY="/usr/share/sb_keys/shim.key"
     SBSIGN_CERT="/usr/share/sb_keys/shim.pem"
 else
-    SBSIGN_KEY="pkcs11:token=flatcar-sb-dev-hsm-sign-2025"
+    SBSIGN_KEY="pkcs11:token=flatcar-secure-boot-prod-2026-04"
     unset SBSIGN_CERT
 fi