I'll also mention:---The $DIGEST_ALGORITHM needs to be supported on the running kernel and can differ from CONFIG_MODULE_SIG_HASH.---As I do no think that is quite obvious to a system integrator at first. Luis