uefi – Secure boot is enabled, but shim isn’t installed to EFI/ubuntu/shimx64.efi

Hi guys I have installed ubuntu with the experimental full hardware backed encryption (learn more here).

When I try to update firmware:

itsme@Laptop:~$ fwupdmgr update
Devices with no available firmware updates: 
 • Integrated Webcam FHD
 • TPM
Devices with the latest available firmware version:
 • BG6 KIOXIA 512GB
╔══════════════════════════════════════════════════════════════════════════════╗
║ Upgrade System Firmware from 1.4.0 to 1.5.0?                                 ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ This stable release fixes the following issues: Initial BIOS release for     ║
║ Latitude 5550,Precision 3590,Precision 3591 MTL.                             ║
║                                                                              ║
║ Latitude 5550 must remain plugged into a power source for the duration of    ║
║ the update to avoid damage.                                                  ║
╚══════════════════════════════════════════════════════════════════════════════╝
Perform operation? [Y|n]: y
Decompressing…           [                                       ]
Secure boot is enabled, but shim isn't installed to EFI/ubuntu/shimx64.efi

Someone told me to install this but I get:

itsmeagain@Laptop:~$ sudo apt install shim-signed
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 boot-managed-by-snapd : Conflicts: grub-efi-amd64-signed but 1.202+2.12-1ubuntu7 is to be installed
                         Conflicts: shim-signed but 1.58+15.8-0ubuntu1 is to be installed
 grub-efi-amd64-signed : Depends: grub-efi-amd64 but it is not going to be installed or
                                  grub-pc but it is not going to be installed
                         Recommends: secureboot-db but it is not going to be installed

Cannot install grub-efi-amd64-signed on system as boot is managed by snapd.
E: Error, pkgProblemResolver::Resolve generated breaks, this may be caused by held packages.

I’m new to ubuntu, how to fix this please?