diff --git a/rpm/kernel-binary.spec.in b/rpm/kernel-binary.spec.in
index 44ebb31..ec77f4b 100644
--- a/rpm/kernel-binary.spec.in
+++ b/rpm/kernel-binary.spec.in
@@ -458,6 +458,10 @@ fi
 	--disable CONFIG_DEBUG_INFO
 %endif
 
+if [ %CONFIG_MODULE_SIG = "y" ]; then
+	test -n "%certs" || ../scripts/config --set-str CONFIG_MODULE_SIG_KEY ""
+fi
+
 case %cpu_arch in
     x86_64 | i386)
         MAKE_ARGS="$MAKE_ARGS ARCH=x86"