The .xrm-ms file is the certificate. The OEM SLP key does NOT need to match the certificate. But the certificate MUST match the SLIC table you intend to mod your BIOS with. You say you have found a Gigabyte.xrm-ms. May I have a look? Can you upload it or provide a link for it?