diff --git a/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/db-system76.crt b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/db-system76.crt
new file mode 100644
index 0000000000..2f5285bcf1
Binary files /dev/null and b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/db-system76.crt differ
diff --git a/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek.crt b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek-microsoft.crt
similarity index 100%
rename from UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek.crt
rename to UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek-microsoft.crt
diff --git a/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek-system76.crt b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek-system76.crt
new file mode 100644
index 0000000000..ceb5d96fdb
Binary files /dev/null and b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek-system76.crt differ
diff --git a/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/pk.crt b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/pk.crt
index a374b28a5e..64f6046aee 100644
Binary files a/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/pk.crt and b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/pk.crt differ
diff --git a/UefiPayloadPkg/UefiPayloadPkg.fdf b/UefiPayloadPkg/UefiPayloadPkg.fdf
index 2b41c5396d..ef639ceef7 100644
--- a/UefiPayloadPkg/UefiPayloadPkg.fdf
+++ b/UefiPayloadPkg/UefiPayloadPkg.fdf
@@ -260,11 +260,13 @@ INF SecurityPkg/RandomNumberGenerator/RngDxe/RngDxe.inf
   }
 
   FILE FREEFORM = 6f64916e-9f7a-4c35-b952-cd041efb05a3 {
-    SECTION RAW = UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek.crt
+    SECTION RAW = UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek-system76.crt
+    SECTION RAW = UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/kek-microsoft.crt
     SECTION UI = "KEK Default"
   }
 
   FILE FREEFORM = c491d352-7623-4843-accc-2791a7574421 {
+    SECTION RAW = UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/db-system76.crt
     SECTION RAW = UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/db-1.crt
     SECTION RAW = UefiPayloadPkg/SecureBootEnrollDefaultKeys/keys/db-2.crt
     SECTION UI = "DB Default"