package:grub-efi-amd64-signed:1.93.11+2.02-2ubuntu8.10
Setting up grub-efi-amd64-signed (1.93.11+2.02-2ubuntu8.10) ...
/boot/vmlinuz-4.19.18-surface-linux-surface is unsigned.
E: Your kernels are not signed with a key known to your firmware. This system will fail to boot in a Secure Boot environment.
dpkg: error processing package grub-efi-amd64-signed (--configure):
 installed grub-efi-amd64-signed package post-installation script subprocess returned error exit status 1