diff --git a/shim.spec b/shim.spec
index 5a2c9d6dce5679322ced1e4ea33331cfd5c0e816..3c7dae574ad8b04bed92b030ed5a41e9e7944518 100644
--- a/shim.spec
+++ b/shim.spec
@@ -20,9 +20,12 @@
 %global shimefivendor /boot/efi/EFI/%{efi_vendor}/
 %global shimBOOT  /boot/efi/EFI/BOOT/
 
+%global enable_sm 0
+%global vendor_cert %{nil}
+
 Name:	   	   shim
 Version:	   15.6
-Release:	   6
+Release:	   7
 Summary:	   First-stage UEFI bootloader
 ExclusiveArch:     x86_64 aarch64
 License:	   BSD
@@ -84,6 +87,12 @@ COMMITID=$(cat commit)
 MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMITID=${COMMITID} "
 MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
 MAKEFLAGS+="ENABLE_HTTPBOOT=true ENABLE_SHIM_HASH=true "
+%if 0%{enable_sm}
+	MAKEFLAGS+="ENABLE_SHIM_SM=true "
+%endif
+%if "%{vendor_cert}" != ""
+	MAKEFLAGS+="VENDOR_CERT_FILE+=%{vendor_cert} "
+%endif
 MAKEFLAGS+="%{_smp_mflags}"
 
 cd build-%{efi_arch}
@@ -144,6 +153,9 @@ cd ..
 /usr/src/debug/%{name}-%{version}-%{release}/*
 
 %changelog
+* Fri Nov 18 2022 luhuaxin <luhuaxin1@huawei.com> - 15.6-7
+- Add some switch for easy to use
+
 * Fri Nov 11 2022 luhuaxin <luhuaxin1@huawei.com> - 15.6-6
 - Bugfix for SM2 certificate chain verify