diff --git a/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.47.ebuild b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.47.ebuild
index aaff192170e75..7a3f3c256bf95 100644
--- a/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.47.ebuild
+++ b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.47.ebuild
@@ -155,6 +155,13 @@ src_configure() {
 		die "USE=generic-uki requires a CONFIG_EFI_ZBOOT enabled build"
 	fi
 
+	# Override user variable with the cert used during build
+	openssl x509 \
+		-inform DER -in "${kernel_dir}/certs/signing_key.x509" \
+		-outform PEM -out "${T}/cert.pem" ||
+			die "Failed to convert pcrpkey to PEM format"
+	export SECUREBOOT_SIGN_CERT=${T}/cert.pem
+
 	local image="${kernel_dir}/$(dist-kernel_get_image_path)"
 	local uki="${image%/*}/uki.efi"
 	if [[ -s ${uki} ]]; then
diff --git a/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.48.ebuild b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.48.ebuild
index 903aa1ed8e025..f27b76b50f36c 100644
--- a/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.48.ebuild
+++ b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.12.48.ebuild
@@ -155,6 +155,13 @@ src_configure() {
 		die "USE=generic-uki requires a CONFIG_EFI_ZBOOT enabled build"
 	fi
 
+	# Override user variable with the cert used during build
+	openssl x509 \
+		-inform DER -in "${kernel_dir}/certs/signing_key.x509" \
+		-outform PEM -out "${T}/cert.pem" ||
+			die "Failed to convert pcrpkey to PEM format"
+	export SECUREBOOT_SIGN_CERT=${T}/cert.pem
+
 	local image="${kernel_dir}/$(dist-kernel_get_image_path)"
 	local uki="${image%/*}/uki.efi"
 	if [[ -s ${uki} ]]; then