Comment by Hasz

If I wanted to keep Secureboot enabled, would signing with a MOK and enrolling that key be sufficient?