openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -days 36500 -subj /CN=RTL3290/


/usr/src/linux-headers-4.4.0-33-generic/scripts/sign-file sha256 ./MOK.priv ./MOK.der /lib/modules/`uname -r`/kernel/drivers/net/wireless/rt3290sta.ko


mokutil --import MOK.der