To boot Hikey-960 in secure boot mode using shim


I need to boot my Hikey-960 target in secure mode.

I am able to boot my hikey target with customized grub-2, i.e., UEFI->grub2, but i need to boot the target in secure boot mode. as in, UEFI->shim->grub2.

Is it possible to register shim to UEFI firmware and then load grub as sec botloader?

Can you please provide steps on modification required?