Comment 9 for bug 1788727

The workaround that I have is removing all UKUU added/mainline kernels, finish configuring the grub packages, reinstall the latest mainline kernel and be on my marry way.

If it installed unsigned versions alongside the signed ones, then the UKUU kernels removed should have no effect on that. Also, if you can't boot with unsigned kernels no matter what when Secure Boot is on, then how come I don't have to turn it off after reinstalling the mainline kernels and the system boots just fine (and yes, I checked)?

It gives me the impression that Secure Boot only looks at GRUB and doesn't really see the kernels.