Import Machine Owner Key
Import the Debian key (entering a simple password when asked - need to reenter after boot):
mokutil --import /var/lib/shim-signed/mok/MOK.der
Reboot.
Check the key "ubuntu Secure Boot Module Signature key" has been registered: