diff --git a/docs/getting-started/enable-secure-boot.md b/docs/getting-started/enable-secure-boot.md
index a99e52d7..3081a32f 100644
--- a/docs/getting-started/enable-secure-boot.md
+++ b/docs/getting-started/enable-secure-boot.md
@@ -62,9 +62,10 @@ your keys to activate Secure Boot. We include Microsoft keys here to
 avoid boot issues.
 
 ```console
-$ sudo sbctl enroll-keys --microsoft
+$ sudo sbctl enroll-keys --microsoft  --firmware-builtin
 Enrolling keys to EFI variables...
-With vendor keys from microsoft...✓
+With vendor keys from microsoft...
+With vendor certificates built into the firmware...✓
 Enrolled keys to the EFI variables!
 ```