diff --git a/.gitignore b/.gitignore
index 67b5ada..66866b8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,3 +13,4 @@
 /edk2-20170209-296153c5.tar.xz
 /edk2-20171011-92d07e4.tar.xz
 /openssl-1.1.0e-hobbled.tar.xz
+/qemu-ovmf-secureboot-1.1.2.tar.gz
diff --git a/edk2.spec b/edk2.spec
index e753e65..0139c63 100644
--- a/edk2.spec
+++ b/edk2.spec
@@ -119,7 +119,7 @@ BuildRequires:  genisoimage
 
 # These are for QOSB
 BuildRequires:  python3-requests
-BuildRequires:  qemu
+BuildRequires:  qemu-system-x86
 %if %{?qosb_testing}
 # This is used for testing the enrollment: builds are run in a chroot, lacking
 # a kernel. The testing is only performed on x86_64 for now, but we can't make
diff --git a/sources b/sources
index 71f06bb..0bf4ee0 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,3 @@
 SHA512 (edk2-20171011-92d07e4.tar.xz) = b7afcefd21470df730648c32455d19e0e31caf15d6a9aedc36a1c390fccddd18719d2710cdd01cf6156bb7551c67fce2a3073bf640b756c32184d889a8d40d46
 SHA512 (openssl-1.1.0e-hobbled.tar.xz) = 25e7d5bddd28501de3f1488c91f4effb0e271986c836302680ea3754d73dceb1d34dd7460096bc28d3c0bced7dd5736dda15ccf5936d9313f4587f68a256efbc
+SHA512 (qemu-ovmf-secureboot-1.1.2.tar.gz) = 4dd7e06663bde90cea99849d47d4c94c48d573ac0454e56eab9174ade999b4dcef73fea63a9bc64d2bccecf8f69c9df2945b237a2f95a08c83d42d744e76d687