Solution
This error is caused when Secure Boot is unable to validate a kernel module.
NI drivers on Linux are installed by
[External] Dynamic Kernel Module System (DKMS), a standard for supporting third-party kernel modules on Linux. DKMS signs each kernel module during installation. For Secure Boot to validate the module signature, the signing key must be enrolled with the system firmware.
Typically, the signing key is /var/lib/dkms/mok.pub. On Ubuntu, the key is /var/lib/shim-signed/mok/MOK.der. To enroll this key with the firmware, follow the instructions provided by DKMS on
[External] Secure Boot. Key enrollment is a one-time event, after which Secure Boot will permit existing and newly-added signed third-party modules.