Vates

@Andrew That's because install is a sub-command: secureboot-certs install -h.

Anyway, if download fails (you can test by using "test" as the user agent for example), the option will be mentioned.

You might have simply a SR coalescing not fast enough for your backup

Update candidate available to fix certificate download: https://xcp-ng.org/forum/post/49373