How to enroll signed kernel module's public key on Jetson AGX Orin

This was accidentally posted on the Xavier forum under the wrong user name. I have reposted in the correct place under my account. Please disregard this post and post comments and answers there instead: