Windows 10 IoT Provisioning Secure Boot keys on NXP boards

Question

Hello,

what is the correct way to enable Secure Boot on NXP i.MX8M? I have generated a set of Secure Boot keys (PK,KEK,db) using following repository [https://github.com/ms-iot/security/tree/master/TurnkeySecurity.

Is it enough to boot to system with Secure Boot enabled in UEFI and load these keys using following commands or are there more steps required?

Set-SecureBootUEFI -Name db -Time 2015-08-31T00:00:00Z -ContentFilePath signing_signatures_SigList.bin -SignedFilePath signing_signatures_SigList_Serialization.bin.p7

Set-SecureBootUEFI -Name KEK -Time 2015-08-31T00:00:00Z -ContentFilePath CA_SigList.bin -SignedFilePath CA_SigList_Serialization.bin.p7

Set-SecureBootUEFI -Name PK -Time 2015-08-31T00:00:00Z -ContentFilePath PlatformKey_SigList.bin -SignedFilePath PlatformKey_SigList_Serialization.bin.p7

Using steps above, Secure Boot variables are populated, but after reboot, Windows ends in Automatic Repair.

I have also tried to prepare a security package using following guide of yours:
[https://learn.microsoft.com/en-us/windows-hardware/manufacture/iot/create-a-basic-image?view=windows-11

But I'm not able to import the NXP BSP using Import-IoTBSP because it is missing some files.

What is the right way to secure the board?
Thank you in advance!