diff --git a/kernel.spec b/kernel.spec
index 4a77f2be4103563cc2eeecfab73e84b94e942b1d..a0ce5a5b3294f0778d413a2a63e3db4544dd5b6c 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -42,7 +42,7 @@ rm -f test_openEuler_sign.ko test_openEuler_sign.ko.sig
 %global upstream_sublevel   0
 %global devel_release       105
 %global maintenance_release .0.0
-%global pkg_release         .97
+%global pkg_release         .98
 
 %global openeuler_lts       1
 %global openeuler_major     2403
@@ -414,10 +414,6 @@ Applypatches series.conf %{_builddir}/kernel-%{version}/linux-%{KernelVer}
 find . \( -name "*.orig" -o -name "*~" \) -exec rm -f {} \; >/dev/null
 find . -name .gitignore -exec rm -f {} \; >/dev/null
 
-%if 0%{?with_signmodules}
-    cp %{SOURCE11} certs/.
-%endif
-
 %if 0%{?with_source}
 # Copy directory backup for kernel-source
 cp -a ../linux-%{KernelVer} ../linux-%{KernelVer}-source
@@ -438,6 +434,10 @@ perl -p -i -e "s/^OPENEULER_RELEASE.*/OPENEULER_RELEASE = \"%{release}\"/" Makef
 ## make linux
 make mrproper %{_smp_mflags}
 
+%if 0%{?with_signmodules}
+    cp %{SOURCE11} certs/.
+%endif
+
 %if %{with_64kb}
 sed -i arch/arm64/configs/openeuler_defconfig -e 's/^CONFIG_ARM64_4K_PAGES.*/CONFIG_ARM64_64K_PAGES=y/'
 sed -i arch/arm64/configs/openeuler_defconfig -e 's/^CONFIG_ARM64_PA_BITS=.*/CONFIG_ARM64_PA_BITS=52/'
@@ -1130,6 +1130,9 @@ fi
 %endif
 
 %changelog
+* Tue Aug 19 2025 yuelg <yuelg@chinaunicom.cn> - 6.6.0-105.0.0.98
+- adjust copying x509.genkey to be after mrproper
+
 * Wed Aug 13 2025 Li Nan <linan122@huawei.com> - 6.6.0-105.0.0.97
 - !17513  sched-ebpf-add-for-exec-init
 - !17487  arm64/mpam: Support partial-core boot for MPAM