Verify kernel signature during kexec_file_load() syscall

configname: CONFIG_KEXEC_VERIFY_SIG

Linux Kernel Configuration
└─>Processor type and features
└─>Verify kernel signature during kexec_file_load() syscall
In linux kernel since version 3.10 (release Date: 2013-06-30)  
This option makes kernel signature verification mandatory for
the kexec_file_load() syscall.

In addition to that option, you need to enable signature
verification for the corresponding kernel image type being
loaded in order for this to work.