loading kernel with secure boot

[Victor]

Hello,
I'm trying to build a iPXE efi file to boot a specific network image. I build my own efi file and included a sript pointing to the kernel and initrd on the network.

If I try to load the kernel I get a Exec format error, this only happens if secureboot is enabled. I tried this using http and nfs with the same results.

The Kernel is signed correctly, I build a bootable USB stick using the exact same kernel and initrd and it works with secure boot.

Do I need to load the kernel in a special way if secureboot is enabled?