diff --git a/grub2.changes b/grub2.changes
index fc7f04e..f3be24c 100644
--- a/grub2.changes
+++ b/grub2.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Feb  7 10:38:42 UTC 2013 - mchang@suse.com
+
+- grub.efi signing on build server.
+
 -------------------------------------------------------------------
 Wed Jan 30 07:29:29 UTC 2013 - mchang@suse.com
 
diff --git a/grub2.spec b/grub2.spec
index 9bd98db..4c83404 100644
--- a/grub2.spec
+++ b/grub2.spec
@@ -15,6 +15,7 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
+# needssslcertforbuild
 
 Name:           grub2
 %ifarch x86_64 ppc64
@@ -47,6 +48,11 @@ BuildRequires:  xz-devel
 %if 0%{?suse_version} == 1210
 BuildRequires:  guile
 %endif
+%ifarch x86_64
+%if 0%{?suse_version} >= 1230
+BuildRequires:  pesign-obs-integration
+%endif
+%endif
 
 # Modules always contain just 32-bit code
 %define _libdir %{_exec_prefix}/lib
@@ -333,6 +339,11 @@ cd grub-efi-%{version}
 make DESTDIR=$RPM_BUILD_ROOT install
 
 install -m 644 grub.efi $RPM_BUILD_ROOT%{_libdir}/%{name}/%{grubefiarch}/grub.efi
+%ifarch x86_64
+%if 0%{?suse_version} >= 1230
+export BRP_PESIGN_FILES="%{_libdir}/%{name}/%{grubefiarch}/grub.efi"
+%endif
+%endif
 
 # Create grub.efi link to system efi directory
 # This is for tools like kiwi not fiddling with the path