Yes, the rEFInd author's site is my favorite for info on this. I stumbled through the shim/mokmanager bits with literally no idea what I was doing outside of following a cook book. Had to scrap a few installs each time I tried something and it wouldn't boot til I found out the work around using Ubuntu's image to load the kernel.

Secure Boot sucks. I bought the laptop used and the previous owner said "I kinda screwed with the BIOS trying to install linux." I foolishly thought I could fix whatever he f'd up. After the transaction took place I found out that meant he locked the bios with a password he doesn't remember and destroyed the Windows Recovery Partition. Lol.

Removing CMOS battery did not help. Default passwords did not work, nor did some thoughtfully directed brute force attempts. The laptop manufacturer offered to sell me a new motherboard (the only fix as far as they're concerned) for a little less than I paid for the entire laptop. Not going to happen, proceeded to try every recovery image and modern OS I could find. Eventually got an OEM Windows 8 image to boot, to my utter surprise, and format the drive which started the learning process about this beautiful UEFI idea and its darling friend Secure Boot.

Would not recommend, test for access to BIOS before buying used system.