Secure Boot Fix Summary:
I oringinally could not get secure boot working today after reading through the documenation here I disabled CSM in my bios and enabled Windows UEFI Mode on my secure boot settings and that seeded to fix it for me. Hope this helps.
Disabled CSM in UEFI firmware
Set OS Type to "Windows UEFI Mode" in UEFI
Enrolled Default Keys in UEFI firmware
Enabled Secure Boot in UEFI
Result: Secure Boot: enabled (user) - fully functional on Bazzite.
Disabled CSM in UEFI firmware
Set OS Type to "Windows UEFI Mode" in UEFI
Enrolled Default Keys in UEFI firmware
Enabled Secure Boot in UEFI
Result: Secure Boot: enabled (user) - fully functional on Bazzite.
