diff --git a/SPECS/grub2.spec b/SPECS/grub2.spec
index abd21902fef0489c371f2e4f50c3436729fb710b..d5701752ebba31413ab41be8ed5bb497ee3fcc4e 100644
--- a/SPECS/grub2.spec
+++ b/SPECS/grub2.spec
@@ -24,6 +24,8 @@ Source6:              gitignore
 Source8:              strtoull_test.c
 Source9:              20-grub.install
 Source12:             99-grub-mkconfig.install
+Source14:             rockylinuxsecurebootkey.cer
+Source16:             rockylinuxsecurebootkey.cer
 Source19:             sbat.csv.in
 
 Source90000:          rocky-root-ca.der
@@ -33,12 +35,12 @@ Source90001:          rocky-signing.der
 %include %{SOURCE1}
 
 %if 0%{with_efi_arch}
-%define old_sb_ca	%{SOURCE13}
-%define old_sb_cer	%{SOURCE14}
-%define old_sb_key	redhatsecureboot301
-%define sb_ca		%{SOURCE15}
-%define sb_cer		%{SOURCE16}
-%define sb_key		redhatsecureboot502
+%define old_sb_ca	%{SOURCE90000}
+%define old_sb_cer	%{SOURCE90001}
+%define old_sb_key	rockylinuxsecurebootkey
+%define sb_ca		%{SOURCE90000}
+%define sb_cer		%{SOURCE90001}
+%define sb_key		rockylinuxsecurebootkey
 %endif
 
 %ifarch ppc64le
@@ -522,6 +524,7 @@ fi
 
 %changelog
 * Tue Nov 09 2021 Release Engineering <releng@rockylinux.org> - 2.02-106
+- Removing redhat old cert sources entries (Sherif Nagy)
 - Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
 - Adding prod cert
 - Porting to 8.5