0001-efitools-prepare-keys.patch 0002-efitools-append-Microsoft-KEK-DB-to-built-in-certs.patch