Ah, It looks like I’ve figured it out. I was very close, and was literally on the last missing step. When prompted to add the selected file to the Secure Boot database in the BIOS, that prompt is actually a field asking for the Boot Description. And so, I once again selected /EFI/fedora/shim.efi, and this time gave it a boot description, which I simply set as “Fedora”. After that, it booted straight to grub, then Fedora. Running mokutil –sb-state finally returns “SecureBoot enabled”.
So, for completeness sake, and any one else that needs it, the full steps for enabling Secure Boot on a Dual-Boot Acer Hardware with an Nvidia GPU then would be the following:
- Generate and Enroll the keys as per the RPM Fusion Guide (or use the guide I linked before)
- Install the Nvidia Drivers and ensure they’re built as per the RPM Fusion Guide (or the guide I linked before)
- Enable SecureBoot in BIOS
- In the BIOS, under Security, select “Select an UEFI File as trusted for executing” and select Fedora’s UEFI file there (which can be first found using something like the
efibootmgrcommand. Provide a short name/description after when prompted. - All done! Confirm SecureBoot state with
mokutil –sb-state.
Thanks again everyone for the help! I do hope future Fedora/Kernel/Nvidia updates won’t mess this up though, but we’ll see.