Last time I tried, you had to disable UEFI secure boot to get PopOS to start. And then follow some complex steps to self sign all those components.
Regular Ubuntu (and Debian) does not need any of this.
Regular Ubuntu (and Debian) does not need any of this.
> The boot loader and kernel must be signed with a trusted key recognized by the UEFI firmware. Microsoft maintains a widely trusted key for Secure Boot called the Microsoft UEFI Certificate Authority, and many Linux distributions use it to sign their boot loaders and kernels. This enables them to boot on systems with Secure Boot enabled by default.