diff --git a/RyanThinkpad.scm b/RyanThinkpad.scm
index 5ca1cf6..f27974d 100644
--- a/RyanThinkpad.scm
+++ b/RyanThinkpad.scm
@@ -25,7 +25,8 @@
'fat32))
(type "vfat")) %base-file-systems))
(bootloader (bootloader-configuration
- (bootloader uefi-uki-bootloader)
+ (bootloader (uefi-uki-signed-bootloader
+ "/var/lib/sbctl/keys/db/db.pem" "/var/lib/sbctl/keys/db/db.key"))
(targets (list "/boot/efi"))
(keyboard-layout (keyboard-layout "us"))))
(swap-devices