Comment 38 for bug 1925010

Fresh installed HH final ISO alongside Windows 10 secure boot enabled. Proposed must be enabled in Hirsute (9 packages):

sudo apt install shim-signed
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages will be upgraded:
  shim-signed
1 upgraded, 0 newly installed, 0 to remove and 8 not upgraded.
Need to get 447 kB of archives.
After this operation, 1,024 B of additional disk space will be used.
Get:1 http://mirrors.edge.kernel.org/ubuntu hirsute-proposed/main amd64 shim-signed amd64 1.47+15.4-0ubuntu2 [447 kB]
Fetched 447 kB in 1s (865 kB/s)
Preconfiguring packages ...
(Reading database ... 159131 files and directories currently installed.)
Preparing to unpack .../shim-signed_1.47+15.4-0ubuntu2_amd64.deb ...
Unpacking shim-signed (1.47+15.4-0ubuntu2) over (1.46+15.4-0ubuntu1) ...
Setting up shim-signed (1.47+15.4-0ubuntu2) ...
Trying to migrate /boot/efi into esp config
Installing grub to /boot/efi.
Installing for x86_64-efi platform.
Installation finished. No error reported.

mokutil --sb
SecureBoot enabled
SecureBoot validation is disabled in shim

uname -r
5.13.0-051300rc1-generic

sda 232.9G
├─sda1 vfat 100M /boot/efi
├─sda2 16M
├─sda3 ntfs 150.1G
└─sda4 ext4 82.6G /

All good!