As well known Ubuntu’s solution, just like Fedora’s, also requires Microsoft key to be installed on the machine. As FSF points out Ubuntu’s plan addresses software distributed through three different channels:
1) Machines sold as “Ubuntu Certified,” preinstalled with Ubuntu, will have an Ubuntu-specific key, generated by Canonical, in their firmware. Additionally, they will be required by the certification guidelines to have the Microsoft key installed. 2) Ubuntu CDs, distributed separately from hardware, will also depend on the presence of Microsoft’s key in the machine’s firmware to boot, when Secure Boot is active. 3) Ubuntu bootloader images distributed online from the official Ubuntu archive will be signed by Ubuntu’s own key.