diff --git a/alws/routers/platforms.py b/alws/routers/platforms.py
index 58868f85..d6f9581e 100644
--- a/alws/routers/platforms.py
+++ b/alws/routers/platforms.py
@@ -45,15 +45,27 @@ async def get_platforms(
     db: AsyncSession = Depends(AsyncSessionDependency(key=get_async_db_key())),
 ):
     platforms = await pl_crud.get_platforms(db)
-    return [
-        {
-            **platform_schema.PlatformResponse.from_orm(platform).dict(
-                exclude={"data"}
-            ),
-            "data": {"versions": (platform.data or {}).get("versions", [])},
-        }
-        for platform in platforms
-    ]
+    result = []
+    for platform in platforms:
+        platform_data = platform.data or {}
+        mock_data = platform_data.get("mock", {}) or {}
+        result.append(
+            {
+                **platform_schema.PlatformResponse.from_orm(platform).dict(
+                    exclude={"data"}
+                ),
+                "data": {
+                    "versions": platform_data.get("versions", []),
+                    # Expose the list of SRPM names that must be built with
+                    # secure boot enabled so the UI can warn the user when
+                    # one of these packages is queued without is_secure_boot.
+                    "secure_boot_required_packages": mock_data.get(
+                        "secure_boot_required_packages", []
+                    ),
+                },
+            }
+        )
+    return result
 
 
 @router.patch(
diff --git a/reference_data/platforms.yaml b/reference_data/platforms.yaml
index 6007da0f..a5c2c3a7 100644
--- a/reference_data/platforms.yaml
+++ b/reference_data/platforms.yaml
@@ -59,6 +59,17 @@
         "%modsign_os": "almalinux8"
       secure_boot_additional_packages:
         - al-signing-client
+      secure_boot_required_packages:
+        - fwupd
+        - fwupd-efi
+        - fwupdate
+        - grub2
+        - kernel
+        - kernel-rt
+        - kmod-kvdo
+        - kmod-redhat-oracleasm
+        - nvidia-open-kmod
+        - shim
     mock_dist: el8
     timeout: 43200
     versions:
@@ -1760,6 +1771,17 @@
         "%modsign_os": "almalinux9"
       secure_boot_additional_packages:
         - al-signing-client
+      secure_boot_required_packages:
+        - fwupd
+        - fwupd-efi
+        - fwupdate
+        - grub2
+        - kernel
+        - kernel-rt
+        - kmod-kvdo
+        - kmod-redhat-oracleasm
+        - nvidia-open-kmod
+        - shim
     mock_dist: el9
     timeout: 43200
     versions:
@@ -3489,6 +3511,17 @@
         "%modsign_os": "almalinux10"
       secure_boot_additional_packages:
         - al-signing-client
+      secure_boot_required_packages:
+        - fwupd
+        - fwupd-efi
+        - fwupdate
+        - grub2
+        - kernel
+        - kernel-rt
+        - kmod-kvdo
+        - kmod-redhat-oracleasm
+        - nvidia-open-kmod
+        - shim
     mock_dist: el10
     timeout: 43200
     versions:
@@ -5541,6 +5574,17 @@
         "%modsign_os": "almalinux10"
       secure_boot_additional_packages:
         - al-signing-client
+      secure_boot_required_packages:
+        - fwupd
+        - fwupd-efi
+        - fwupdate
+        - grub2
+        - kernel
+        - kernel-rt
+        - kmod-kvdo
+        - kmod-redhat-oracleasm
+        - nvidia-open-kmod
+        - shim
     mock_dist: el10
     timeout: 172800
     yum: