Comment 10 for bug 1869187

Confirmed shim-signed 1.37~18.04.6+15+1533136590.3beb971-0ubuntu1 from bionic-proposed fixes the problem described on this ticket

installed bionic
# apt update
# apt upgrade
edit /etc/apt/source.list to include bionic-proposed
# apt update
# apt install shim-signed
# dpkg -l | grep shim-signed
ii shim-signed 1.37~18.04.6+15+1533136590.3beb971-0ubuntu1 amd64 Secure Boot chain-loading bootloader (Microsoft-signed binary)

Then install dkms firmware
# sudo apt install fwts-efi-runtime-dkms
Got prompt with a menu to set the MOK password

# reboot
Got prompt to enroll the MOK with previous password

Keys shows enrolled
# mokutil --list-enrolled