- Booting in setup gives you the option to install the key of the bootloader you are booting into EFI. Presumably that bootloader has not been signed by the Microsoft key.
- There is also another program you can run LockDown.efi that you can run in setup mode that will replace all of the EFI keys.
For more details have a look at the README
Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds