We reported a little while ago that the Linux Foundation would be getting their own boot loader image sorted for people wanting to install Linux distros onto newer systems. To do this, they were getting their own key from Microsoft, and then distributing the image for everyone to use. After some delays, the key has been acquired, and the PreLoader files are ready to go.
There was supposed to be a keytool, but that has been delayed further, as explained on the Foundation blog by James Bottomley:
“Originally this was going to be part of our signed release kit. However, during testing Microsoft discovered that because of a bug in one of the UEFI platforms, it could be used to remove the platform key programmatically, which would rather subvert the UEFI security system. Until we can resolve this (we’ve now got the particular vendor in the loop), they declined to sign KeyTool.efi although you can, of course, authorize it by hash in the MOK variables if you want to run it.”
Get the efi files from the Linux Foundation site.