apt install efitools
mkdir ~/sbkeys && cd ~/sbkeys
wget https://www.rodsbooks.com/efi-bootloaders/mkkeys.sh
chmod +x mkkeys.sh
./mkkeys.sh