default or selected kernelversion does not have config value CONFIG_KEXEC_VERIFY_SIG.
Result is shown for kernelversion 6.9.9

Verify kernel signature during kexec_file_load() syscall

configname: CONFIG_KEXEC_VERIFY_SIG

Linux Kernel Configuration
└─>Processor type and features
└─>Verify kernel signature during kexec_file_load() syscall
In linux kernel since version 3.10 (release Date: 2013-06-30)  
This option makes kernel signature verification mandatory for
the kexec_file_load() syscall.

In addition to that option, you need to enable signature
verification for the corresponding kernel image type being
loaded in order for this to work.