Comment 18 for bug 1401532

It's not shipped in any package right now, that wasn't the point for the time being (and this is why I'm setting things back to Triaged).

The gsbx64.efi.signed file here:
http://archive.ubuntu.com/ubuntu/dists/zesty/main/uefi/grub2-amd64/current/
... is the file you want; but for now there is no process that consumes that file to install it, even if it was provided in grub2-signed.

This is *not* a final product and *does* need additional changes to be used as such: any grub configuration will need to replace any 'linux' and 'initrd' calls with 'linuxefi' and 'initrdefi'.

This is just a temporary workaround to provide a way to enforce Secure Boot in the cases where this is needed.