Comment # 1 on bug 921221 from Neil Rickert

This seems strange.  I have mostly heard good reports about ASUS implementation
of UEFI.

My UEFI experience (with Dell and Lenovo) there was no ncurses screen.  The
computer already had a Windows key, and shim has a signature from that key. 
Shim was accepted without problems.

Not asking about trust a second time probably means that the key was saved in
NVRAM the first time.

I'm not sure why you wiped in legacy mode, instead of just turning off
secure-boot but keeping UEFI mode.  That should have avoided all key problems.

(just a comment from someone with no official standing).