diff --git a/rpm-config-SUSE.changes b/rpm-config-SUSE.changes
index 0b85cbf..e434ec4 100644
--- a/rpm-config-SUSE.changes
+++ b/rpm-config-SUSE.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Apr 11 11:50:22 UTC 2022 - Ludwig Nussel <lnussel@suse.de>
+
+- add SBAT values (boo#1193282)
+
 -------------------------------------------------------------------
 Fri Mar 18 12:14:16 UTC 2022 - dmueller@suse.com
 
diff --git a/rpm-config-SUSE.spec b/rpm-config-SUSE.spec
index a9f1c19..d09ecf2 100644
--- a/rpm-config-SUSE.spec
+++ b/rpm-config-SUSE.spec
@@ -58,6 +58,20 @@ sed -e 's/@suse_version@/%{?suse_version}%{!?suse_version:0}/' \
 %endif
   < suse_macros.in > suse_macros
 
+cat <<EOF > macros.d/macros.sbat
+# Common SBAT values for secure boot
+# https://github.com/rhboot/shim/blob/main/SBAT.md
+
+%if 0%{?is_opensuse}
+%%sbat_distro          opensuse
+%%sbat_distro_summary  The openSUSE Project
+%else
+%%sbat_distro          sle
+%%sbat_distro_summary  SUSE Linux Enterprise
+%endif
+%%sbat_distro_url      mailto:security@suse.de
+EOF
+
 %install
 # Install SUSE vendor macros and rpmrc
 mkdir -p %{buildroot}%{_rpmconfigdir}/suse