After my bios was updated, the nvidia kernel modules wouldn’t load. Nor would any dkms modules.
My fix was to re-create a key, sign the kernel DKMS modules and then enroll it.
$ sudo update-secureboot-policy –new-key
$ find /var/lib/dkms -name “*.ko” -exec sudo kmodsign sha512 /var/lib/shim-signed/mok/MOK.priv /var/lib/shim-signed/mok/MOK.der {} \;
$ sudo mokutil –import /var/lib/shim-signed/mok/MOK.der #prompted to create a password, needs to be between 8-12 #characters. $ sudo reboot
After rebooting, a blue screen will ask about MOK management, and you have 10 seconds to press any key.
Continue to enroll the key, entering your password created above.
Reboot and success!