diff --git a/shim.rpmmacros b/shim.rpmmacros
index 731464a..9ca2fe7 100644
--- a/shim.rpmmacros
+++ b/shim.rpmmacros
@@ -6,6 +6,8 @@
 %global grub_version 2.06-63
 %global fwupd_version 1.5.8
 
+%define __pesign_client_cert grub2-signer
+
 %global bootcsvaa64 %{expand:%{SOURCE10}}
 %global bootcsvarm %{expand:%{SOURCE13}}
 %global bootcsvia32 %{expand:%{SOURCE11}}
diff --git a/shim.spec b/shim.spec
index 3b5852e..17d363a 100644
--- a/shim.spec
+++ b/shim.spec
@@ -5,7 +5,7 @@
 
 Name:		shim
 Version:	15.8
-Release:	2%{?dist}
+Release:	3%{?dist}
 Summary:	First-stage UEFI bootloader
 License:	BSD-3-Clause
 URL:		https://github.com/rhboot/shim/
@@ -107,6 +107,10 @@ install -m 0644 %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/dnf/protected.d/
 %endif
 
 %changelog
+* Tue Mar 19 2024 Peter Jones <pjones@redhat.com> - 15.8-3
+- Fix fbx64/mmx64 signing.
+  Related: rhbz#2189197
+
 * Tue Mar 12 2024 Peter Jones <pjones@redhat.com> - 15.8-2
 - Update to shim-15.8
   Resolves: CVE-2023-40546