Thanks! Indeed, I had to set
```
[uefi_capsule]
DisableShimForSecureBoot=true
```
and install the `fwupd-unsigned` package, uninstall the
`fwupd-amd64-signed` package.
Then I used sbsign to sign `/usr/libexec/fwupd/efi/fwupdx64.efi`.
Another `sudo fwupdmgr update` (now without error) and a reboot later,
my Lenovo X280 was updated from firmware 1.57 to 1.59. Jippieh!
On 03/07/2026 16.09, Mario Limonciello wrote:
Did you set the right configuration option (DisableShimForSecureBoot)?
https://fwupd.github.io/libfwupdplugin/fwupd.conf.html#uefi_capsule-
parameters
