This video shows how to boot AIO Boot NewGen's Grub2 with Secure Boot enabled using Shim and Mok Manager.
Read more: https://www.aioboot.com/en/secure-boot/
Short steps: OK/Enter/Enroll key from disk/EFI/ENROLL_THIS_KEY_IN_MOKMANAGER.cer/Continue/Yes/Reboot.