diff --git a/archlinux.md b/archlinux.md
index 5e67512..3315e08 100644
--- a/archlinux.md
+++ b/archlinux.md
@@ -93,6 +93,7 @@ https://support.system76.com/articles/fix-raw-image-previews/
 6. `mount /dev/nmve0n1p1 /boot`
 7. fix stuff
 8. `mkinicpio -p linux`
+9. sbctl verify; sbctl sign /boot/{things}
 9. sync, unmount boot and tmp
 10. `cryptsetup luksClose luksdev`