diff --git a/SOURCES/sb/rocky-root-ca.der b/SOURCES/sb/rocky-root-ca.der
new file mode 100644
index 0000000..9d3a807
Binary files /dev/null and b/SOURCES/sb/rocky-root-ca.der differ
diff --git a/SOURCES/sb/rocky-signing.der b/SOURCES/sb/rocky-signing.der
new file mode 100644
index 0000000..51d2aac
Binary files /dev/null and b/SOURCES/sb/rocky-signing.der differ
diff --git a/SOURCES/sb/rockydup1.x509 b/SOURCES/sb/rockydup1.x509
new file mode 100644
index 0000000..4296d0f
Binary files /dev/null and b/SOURCES/sb/rockydup1.x509 differ
diff --git a/SOURCES/sb/rockykpatch1.x509 b/SOURCES/sb/rockykpatch1.x509
new file mode 100644
index 0000000..860f8c9
Binary files /dev/null and b/SOURCES/sb/rockykpatch1.x509 differ
diff --git a/SPECS/rocky-release.spec b/SPECS/rocky-release.spec
index 6050d7a..df6e492 100644
--- a/SPECS/rocky-release.spec
+++ b/SPECS/rocky-release.spec
@@ -16,7 +16,7 @@
 %define distro_code  Blue Onyx
 %define major        9
 %define minor        0
-%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.1}
+%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.2}
 %define rpm_license  BSD-3-Clause
 %define dist         .el%{major}
 
@@ -140,6 +140,10 @@ Source1226:     Rocky-Plus.repo
 Source1300:     rocky.1.gz
 
 # rocky secureboot certs placeholder (1400-1499)
+Source1400:     sb/rockydup1.x509
+Source1401:     sb/rockykpatch1.x509
+Source1402:     sb/rocky-root-ca.der
+Source1403:     sb/rocky-signing.der
 
 %description
 %{distro_name} release files.
@@ -276,6 +280,12 @@ install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
 install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
 install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
 
+# Backported certs for now
+install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
+
 # x86_64
 echo "placeholder" > %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.crt
 
@@ -381,6 +391,9 @@ install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
 %{_datadir}/pki/sb-certs/*.crt
 
 %changelog
+* Thu Jan 27 2022 Louis Abel <label@rockylinux.org> - 9.0-1.2
+- Backport current SB certs for now
+
 * Mon Jan 10 2022 Louis Abel <label@rockylinux.org> - 9.0-1.1
 - Add LOGO to /etc/os-release