Provided this in irc, but posting here also. Instructions for installing a MOK that you can use to sign kernels are found here:
https://ubuntu.com/blog/how-to-sign-things-for-secure-boot
Note the comment under "Enrolling the key" about omitting OID 1.3.6.1.4.1.2312.16.1.2 if you want to use the key to sign kernels.
Provided this in irc, but posting here also. Instructions for installing a MOK that you can use to sign kernels are found here:
https:/ /ubuntu. com/blog/ how-to- sign-things- for-secure- boot
Note the comment under "Enrolling the key" about omitting OID 1.3.6.1. 4.1.2312. 16.1.2 if you want to use the key to sign kernels.