Hi Phil,
Your correct. I missed a step about importing the key: mokutil --import MOK.der
So then I rebooted entered teh MOK, accepted all certs and rebooted and it loaded.
I only have one problem with this... many of my systems are remote. I "will not" be able to remotely enter the MOK and accept the certs etc... How do I get around this? Recall that my hardware (NUC7C) does not allow to disable UEFI. So I have to use UEFI.
Thanks for all the suggestions.
Jerry