That's because secure boot doesn't allow unknown modules to be loaded into kernel.
Try signmod it generates a certificate/key pair during installation and installs cert in MOK, later the signmod script uses the generated key to self sign the modules, enabling seamless loading.