It depends on a single variable - does your motherboard support manipulating the secure boot keys? I’ve only done it on prebuilt dells and dell laptops, but some other manufacturers also allow it.
The procedure is very simple, but has many steps. Don’t get discouraged! I remember ArchWiki having a very thorough guide that worked for me.
The gist of it is you provide UEFI firmware the cert to trust and then use the keys to sign your kernel image. I’ve never had to deal with signing the modules (mostly nVidia related, I think), but the procedure would be the same.