FYI, in kubuntu this command failed also and i had to manually add the certificate to the MokList using KeyTool.efi while outside kubuntu.